Perhaps the OP means OsQuery: https://github.com/osquery/osquery
OsQuery is an SQLite extension consisting of hundreds of virtual tables that provide SQL access to operating system status and configuration.
OsQuery is an SQLite extension consisting of hundreds of virtual tables that provide SQL access to operating system status and configuration.
I'm trying to wrap my head around where this sits within the OS. Is it a layer "on top" of everything? Or does it sit "underneath" the higher level os functionality?
Apologies if that doesn't make any sense, it looks to be a really cool tool and I'll be investigating it regardless.
So it sits in the same place as `top` or similar.