capabilities.work

Create an osquery pack

One step with Elastic Stack. We can help you get access.

Get something done

Create an osquery pack

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Osquery API lets you create an osquery pack in a single step (POST /api/osquery/packs). capabilities.work can help you get signed up and connected.

  • How do I bundle several scheduled osquery queries into a pack?
  • Can I assign a new pack to specific agent policies?
Say it to your AI assistant
  • Create pack {name} with queries {queries}.
  • Create an enabled pack {name} assigned to policies {policy_ids}.
For your developer

POST /api/osquery/packs in Kibana Security Osquery API. Full spec on APIs.io.

More you can do with Elastic Stack

Assign users to attack discovery alertsSearch and aggregate attack discoveriesChange the workflow status of attack discoveriesTag or untag attack discoveriesCheck the security alerts indexCreate the security alerts indexDelete the security alerts indexCheck my security detection privilegesGet a detection ruleReplace a detection ruleCreate a detection ruleDelete a detection rule