Welcome to Pluralsight and this Blue Team Tools course featuring osquery,
the open source OS analysis and auditing tool developed
originally by the engineers at Facebook and maintained as
an open source tool since then.
This tool can help us detect many different attacks and TTPs.
We'll use it in this course to help protect against user
accounts being created outside of the norm.
We'll use it to detect file manipulation,
such as copying and moving files to be staged for extraction.
Osquery is used as an operating system instrumentation framework and tool,
but provides so much more than that, such as auditing and monitoring.
Therefore, it's our operating system auditor of sorts.
I hope that you join me in learning about osquery in the OS
Analysis osquery course here, at Pluralsight.