This is a tiny app i made, that you would run locally on your workstation and it will dispatch osquery queries to the machines under your command.
The commands are listed in the main root route of the app so you don’t need to dig deep. And i really like osquery project, if you have never checked it out, you should probably take a look.
The only requirement is that your target machines should have osquery installed on them, thats it..
go get github.com/emirozer/exposq
Lets assume you are going to run exposq from your home directory(/home/user/).
After running the command above, you need to create a file called targets.json in your /home/user/
Example formatting of targets.json file:
Important Notes : It expects a private key and you can give a key file specific to a target like the following json structure