This repository is used to hold Jupyter Notebooks that are used to work with Osquery tables and data.
This repository is also used to support https://sevickson.github.io/ with data for sharing in blogs.
OSQuery-Tables-interactive_Jupyterthon is a Jupyter Notebook I created for a talk I gave at Infosec Jupyterthon!
At this moment I have the following to-dos for the OSQuery-Tables Notebook:
- Create graphs and shortest path functions for Linux, macOS and FreeBSD.
- Check the data returned from the tables when querying and use that data to further fine-tune the filtering.
- Not all shortest paths are correct, data in the columns do not match, maybe use the same data as previous bullet to build correct paths.
- Make it possible to use other column names to create graphs with, maybe based on same returned data from a query.