Skip to content

Instantly share code, notes, and snippets.

@davidmerrick

davidmerrick/osquery.md

Created August 22, 2019 01:08
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save davidmerrick/541a756d1f4584ee296f6d0bc33ab41b to your computer and use it in GitHub Desktop.
Save davidmerrick/541a756d1f4584ee296f6d0bc33ab41b to your computer and use it in GitHub Desktop.
Download ZIP
Useful osquery
Raw
osquery.md

Run the osquery shell with osqueryi

Show hard disk space remaining:

select path, type, round((blocks_available * blocks_size *10e-10),2) as gigs_free from mounts where path='/';
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment