Search Results for "network activity indicator"

...This allows you to write SQL queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events or file hashes.Osquery queries your devices like a database. Osquery uses basic SQL commands to leverage a relational data-model to describe a device. Frequently, attackers will leave a malicious process running but delete the original binary on disk. This query returns any process whose original binary has been deleted, which could be an indicator of a suspicious process.

If you are managing hosts, you want to see what's happening on the console. Ideally you want to interact with the console as well via a managed solution. multicons will watch that console for you and allow users to interact with the console keeping complete logs. multicons is a daemon that provides multiplexed access to network accessible consoles (e.g. terminal servers, Serial Over LAN, etc). Features include kerberised authentication, ACL based entitlements, multiple viewers/editors, full...