capabilities.work

Update an osquery pack

One step with Elastic Stack. We can help you get access.

Get something done

Update an osquery pack

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Osquery API lets you update an osquery pack in a single step (PUT /api/osquery/packs/{id}). capabilities.work can help you get signed up and connected.

  • Can I change the queries or schedule of an existing pack?
  • Why can't I edit a prebuilt osquery pack?
Say it to your AI assistant
  • Update pack {id} with queries {queries}.
  • Disable pack {id} by setting enabled to {enabled}.
For your developer

PUT /api/osquery/packs/{id} in Kibana Security Osquery API. Full spec on APIs.io.

More you can do with Elastic Stack

Assign users to attack discovery alertsSearch and aggregate attack discoveriesChange the workflow status of attack discoveriesTag or untag attack discoveriesCheck the security alerts indexCreate the security alerts indexDelete the security alerts indexCheck my security detection privilegesGet a detection ruleReplace a detection ruleCreate a detection ruleDelete a detection rule