Windows network security now easier with osquery

Summary: Facebook announced the completion of osquery for Windows, a port that Trail of Bits worked on, bringing the open source endpoint security tool to Windows alongside Linux and Mac OS X. The port required adding Windows service functionality for the daemon, re-implementing the processes table through a generic Windows Management Instrumentation abstraction, and ensuring every library osquery depends on worked on Windows. osquery for Windows is distributed only as source code and currently builds only on Windows 10.
What's compelling: Windows environments previously had to cobble together manual solutions or pay for commercial agents that risked exposing sensitive data to cloud-based services; a free, community-supported option now exists for the platform most enterprises run.

Read the original at Trail of Bits Blog ↗

Topics: Endpoint & Network Security
Related: Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026
Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026
Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026