osquery

osquery·osquery.osquery

SQL powered operating system instrumentation, monitoring, and analytics.

winget install --id osquery.osquery --exact --source winget

Latest 5.23.1·June 24, 2026

Release Notes

This is a bug and security fix release. What's Changed Fixes

  • Fix heap buffer overflow in Windows processes table by @seph in #8934
  • Fix heap buffer overflow in Windows authenticode table by @seph in #8923
  • Fix use-after-free in Linux process_file_events implementation by @zwass in #8950
  • Fix incorrect permissions on temporary file carve directories by @zwass in #8961
  • Fix documentation for process_open_handles table by @seph in #8853
  • Fix subject2 and issuer2 columns for Windows certificates table by @getvictor in #8963 Full Changelog: 5.23.0...5.23.1

Installer type: wix

ArchitectureScopeDownloadSHA256
x64DownloadBB3ADC9F32F257147855404D24BCEEBCD8BAF6E65F4D4CA43E186F4A85FA6ED3

Details

Homepage
https://osquery.io/
License
Apache-2.0 OR GPL-2.0-only
Publisher
osquery
Support
https://github.com/osquery/osquery/issues

Tags

hacktoberfestintrusion-detectionmonitoringsecuritysql

Older versions (11)

5.23.0
ArchitectureScopeDownloadSHA256
x64Download5060C7CC21BC00258B5D7822A769CB619FF432C02BA89F6C1B6CBFA127D59B40
5.22.1
ArchitectureScopeDownloadSHA256
x64Download91238C6F7543979E59D88886D61E8E7A222F6595F89B24BFAC385D31433F7A02
5.21.0
ArchitectureScopeDownloadSHA256
x64Download573E53F9C5E8BE3B356CAB1CD1A4C4BB175E811B89BE7AD89D04AFAC8527B464
5.20.0
ArchitectureScopeDownloadSHA256
x64Download68BC735B82AEB7AF8660A770B6626BE2ADBA5403E8112C62BAB254BA5B917960
5.19.0
ArchitectureScopeDownloadSHA256
x64Download6FE06CAB43A31C596E4001616EEE66FB32556BF5C228C4A4BA6DAF2897EDC1A3
5.18.1
ArchitectureScopeDownloadSHA256
x64DownloadBA4C5DEF84E35EF101FC4EC3F47DD2124C66D736F0F124ACDB18C7B29DF253FE
5.17.0
ArchitectureScopeDownloadSHA256
x64DownloadAF3CD2F989F7F7ACA667291674EDA4656F7795A7559F47E72521E71B31FF3BA5
5.16.0
ArchitectureScopeDownloadSHA256
x64DownloadBE40425E0E4C182F9A1B882FC12A8B81FA4E872D3CD27AAD62AEE0CD1FAC7038
5.11.0
ArchitectureScopeDownloadSHA256
x64Download825BF75D0DCA88A5E8CEA699B90696738BD9BE44C9B8CFCE3906A3E2AB49B156
5.8.2
ArchitectureScopeDownloadSHA256
x64DownloadD319837D4E95D1E477C2126D383501180925A29F488FF1164FA16D2E576F96DD
5.6.0
ArchitectureScopeDownloadSHA256
x64DownloadC480B7B0352FB19B952DF9C0331926F134B1234DA716C8B12B6A9C5E19CABCE9