osquery on a Mac
Query your endpoint like a database (agent) · Security Tools
osquery (Meta, now Linux Foundation) exposes the OS as SQL tables; processes, sockets, users, launchd items, file hashes; for ad-hoc investigation (osqueryi) or scheduled fleet telemetry (osqueryd). Install the macOS cask; pair it with Fleet (below) for a central web UI + API across many Macs.
Run osquery with FrontierStack
Install or connect osquery; then check its status, ports and certificate from FrontierStack. The same screen links to firewall checks, Malware Audit and backups where they apply.
Run it from your Mac.
FrontierStack installs, monitors and secures services on this Mac and on linked servers.
Download FrontierStackApple notarized · Safe & secure · macOS 13 Ventura+