Kolide osquery install#
Kolide osquery update#
Kolide osquery software#
Kolide osquery code#
Kolide osquery download#

While you will be working independently on projects, you won’t be on your own. Write a type-safe layer to allow interfacing osquery to the generalized WMI query interface.Create a multipurpose library to convert complex data to EAV structure.

Kolide osquery update#

Improve the reliability of agent’s auto update capability.

Research Linux disk encryption, and create tables to expose that state to osquery.

Write tools to automate OS package generation for our agent.

Here are some example projects that Kolide employees completed recently and are representative of the work:

Kolide osquery code#

This includes auto-updating, native installation, code signing, uninstallation, persistence, and managing its overall performance.

Kolide osquery install#

That’s it.Īgents are complicated, and Endpoint Engineers are also responsible for ensuring they are good citizens on the devices they inhabit and are easy for our customers to install and manage.

The entire company has two additional meetings each week, so we get some face time and stay aware of new customers and exciting development.

Kolide’s engineering team has a single 1 hour meeting at the start of the week to coordinate on engineering work. This often involves researching native APIs (or reverse engineering private APIs) to allow the agent to collect the data needed to further Kolide’s detection goals. Today, Endpoint Engineers accomplish this by working on Kolide’s open source agent (written in Go), or directly contributing to osquery (written in Objective C and C++). Ground truth is the foundational aspect of Kolide’s product.Įndpoint Engineers are directly responsible for collecting ground truth on Linux, Mac, and Windows endpoints. Kolide’s mission can only be achieved with good ground truth, the practice of ethically collecting pertinent information, through direct observation. To prepare, we are looking to responsibly develop our organization to help us meet our lofty goals while increasing our organization’s diverse set of skills and perspectives. With over 250 customers and a novel approach to solving security and compliance concerns, Kolide is poised to grow quickly over the next few years.

Kolide osquery software#

Kolide is a VC-backed remote-first startup building device management and security software for fast-growing companies that value Honest Security.

While demonstrating empathy, respect, and care for what is most important – peopleĮmpowering them to do the best work of their lives. If email is properly configured, you should see a test message from Fleet in this UI.We help organizations practice Honest Securityīuilding software that secures and manages digital assets Mailhog starts a UI available at port 8025 on your docker host ( if you are on the docker host) for viewing the emails 'sent' through its SMTP server. When completed, the configuration should look like this: In Fleet, navigate to Admin -> App Settings ( /admin/settings).To configure Fleet with this demo email server: In a production Fleet deployment, you would use your normal SMTP server. demo.sh up starts a Mailhog container that facilitates this. For those who would like to demo Fleet with a simulated email server. Testing with Email (Optional)Įmail setup is not required to demo Fleet. Soon we will introduce package generation for configuring Linux osquery hosts to operate with this demo. Note: If you want to enroll the macOS host that this demo is running on you may have to edit the /etc/hosts file as specified in the output when generating the installer. Now, ensure that osquery is installed on the target host, and run the generated installer package to configure the osquery installation. The generated installer will be located in out/kolide-enroll-1.0.0.pkg. Docker and Docker Compose (installed by default with Docker on Mac and Windows)Īll other necessary dependencies will be installed via Docker by the scripts in this repository.

Kolide osquery download#

Git, or a way to download and unzip these scripts.Bash compatible shell with standard unix commands.If you would like to contribute to the script, you can open an Issue or Pull Request. You can contact us by email at or by joining #kolide on the osquery slack team. We're available to help with this script, or deploying Kolide in your environment. For guidance on installing a production Fleet environment, please see the infrastructure documentation. If you would like to try Fleet without setting up a production testing environment, this demo is for you. The scripts and config files in this repository will enable you to quickly get a demo Kolide Fleet installation up and running. Because Fleet is now open source, please refer to the Fleet docs for information on getting started with Fleet. This repository was created to demo Kolide Fleet before it was available as an open source tool.