The osquery Agent. Performance Tuning @Scale with Zach Wasserman [osquery@scale 2020]

Описание: Zach Wasserman, Founder & Principal Engineer, Dactiv, LLC
Dive into understanding, tuning, and monitoring the performance of osquery agents at scale. Learn to evaluate the performance of queries in development, tune the built-in watchdog to limit resource utilization, and create dashboards to understand the real-world impacts of osquery within your organization. Though osquery is developed with performance in mind, resource consumption by the osquery agent can be a real political and technical challenge for security teams looking to deploy osquery broadly. This talk draws on experience working with osquery in organizations as large as Facebook to distill the most important strategies for managing the agent. This session was presented at osquery@scale 2020. You can find more information at https:www.osqueryatscale.com