Comment by revelation | Hacker News Reader

Top New Best Ask Show Jobs

Comment by revelation | Hacker News Reader

So they have reinvented Windows Management Instrumentation (WMI)? I think it even uses similar pseudo-SQL queries.

Thank you, I'll stay with the Microsoft solution that will still work in 10 years.

The blog post by the team that did the port (Trail of Bits), mentions that it uses wmi and shims the data into osquery.

https://blog.trailofbits.com/2016/09/27/windows-network-secu...

Except WMI is, as the name implies, Windows-only.

Except that it works on Linux and Mac.

That was what I was thinking. I use it all the time.

WML queries over WMI do not give you the full generality of SQL, though.

Reply on news.ycombinator.com