capabilities.work

Get an osquery pack

One step with Elastic Stack. We can help you get access.

Look something up

Get an osquery pack

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Osquery API lets you get an osquery pack in a single step (GET /api/osquery/packs/{id}). capabilities.work can help you get signed up and connected.

  • Which queries are inside a given osquery pack?
  • What schedule and policies does a pack use?
Say it to your AI assistant
  • Get the details of pack {id}.
  • Show the queries in osquery pack {id}.
For your developer

GET /api/osquery/packs/{id} in Kibana Security Osquery API. Full spec on APIs.io.

More you can do with Elastic Stack

Assign users to attack discovery alertsSearch and aggregate attack discoveriesChange the workflow status of attack discoveriesTag or untag attack discoveriesCheck the security alerts indexCreate the security alerts indexDelete the security alerts indexCheck my security detection privilegesGet a detection ruleReplace a detection ruleCreate a detection ruleDelete a detection rule