zercurity

Just a shameless plug we've written thousands of queries to automate many compliance checks against major frameworks such as: NCSC-CE, CIS, SOC and ISO. https://www.zercurity.com/product/compliance/ It'll even collate all the evidence for you and help your employees improve their own cyber security posture based on your corporate policies.

We've been using this tool to strip out unwanted Microsoft 'features' such as Cortana. Its a powershell script you simply give it your Windows ISO and it lets you remove applications and services you don't wanted installed. It creates a really awesome Windows OS. I highly recommend it.

https://github.com/DrEmpiricism/Optimize-Offline

Great to see a new release! Massively appreciate all the hard work of the Osquery contributors.

Hey, there are a few open-source projects doing this:

- https://github.com/kolide/fleet - https://github.com/mwielgoszewski/doorman - https://github.com/zentralopensource/zentral

Then there are a few freemium:

- https://www.zercurity.com/ (Shameless plug - free for as long as you like) - https://kolide.com/ (Though no SQL interface anymore) - https://www.uptycs.com/ (Free trial)

Hope that helps. I'm sure there are a few others.

We're trying to address this. If you've got sometime I'd really like to compare notes on this and learn how you guys work day-to-day. We're leveraging Osquery to asses the various aspects of systems to try and build threat models where risk cascades as systems change. To help facilitate automated reporting. Alongside the traditional mundane cybersecurity day-to-day activities.