Osquery: The Basics

Walkthrough summary

Osquery: The Basics TryHackMe walkthrough with 18 answered prompts and lab methodology notes.

Sample prompts covered

• How many tables are returned when we query "table process" in the interactive mode of Osquery?
  Open the walkthrough page to inspect the full answer and command flow.
• Looking at the schema of the processes table, which column displays the process id for the particular process?
  Open the walkthrough page to inspect the full answer and command flow.
• Examine the .help command, how many output display modes are available for the .mode command?
  Open the walkthrough page to inspect the full answer and command flow.
• In Osquery version 5.5.1, how many common tables are returned, when we select both Linux and Window Operating system?
  Open the walkthrough page to inspect the full answer and command flow.
• In Osquery version 5.5.1, how many tables for MAC OS are available?
  Open the walkthrough page to inspect the full answer and command flow.