Featured
      Device Auth: Introducing Notify Only Check Strategy
        We've introduced a new Check remediation strategy named "Notify Only" added the
capability to delay the start of Check failure notifications.
      
      
        Read More
        
    
    Tutorials
      How to Build Custom Osquery Tables Using ATC
        
    
    Tutorials
      The File Table: Osquery's Secret Weapon
        
    
    Tutorials
      How to Deal With Dates and Times in Osquery
        
    
    Deep Dives
      Why You Can't Trust Your NULLs in Osquery
        
    
    Tutorials
      How to Find a Mac's Manufacture Date Using Osquery
        
    
    Deep Dives
      Modern Macs Still Need FileVault
        
    
    Inside Kolide
      How Kolide Built Its macOS Screenlock Check
        
    
    Deep Dives
      Are Your Employees Slack Messages Leaking While Their Screen Is Locked?
        
    
    Tutorials
      How to Set up Windows File Integrity Monitoring Using Osquery and Kolide
        
    
    Tutorials
      How to Find and Fix CVE-2020–0601 Using Osquery and Kolide
        
    
    Tutorials
      How to Read Nested Complex Plists in Osquery
        
    
    Deep Dives
      macOS Catalina & Osquery