In blog posts to follow, we will correlate network-based events monitored by Zeek and host-based events generated by Osquery using the CommunityID. The score ranges from 1 (least traffic) to 100 (most traffic). As the creator of PolyLogyx Endpoint Platform, PolyLogyx OSQuery Agent and PolyLogyx Kernel Library, PolyLogyx has significant experience in the field of endpoint detection and response (EDR).
Polylogyx osquery It checked all the boxes and, most important, it was an easier, faster, cheaper and better solution than building our own tool.