Announcing the community-oriented osquery fork, osql

Summary: Trail of Bits announced osql, a community-oriented fork of osquery, after Facebook spent months refactoring the codebase away from CMake and toward internal tooling, which dropped support for some architectures, operating systems, and developer tools and stalled review of community contributions. The fork returns the build system to CMake, adds a public Azure Pipelines CI that builds and tests each commit, and commits to a monthly release cadence, initially as unsigned binaries with code signing planned.
Why it matters: Enterprises are already postponing planned osquery deployments and looking for alternatives, so the endpoint tooling many security teams built their visibility on now has two maintainers with diverging roadmaps and no shared release schedule.

Read the original at Trail of Bits Blog ↗