![osquery watchdog osquery watchdog](https://blog.spoock.com/2018/12/29/osquery-under-the-hood/6.png)
![osquery watchdog osquery watchdog](https://blog.spoock.com/2018/12/29/osquery-under-the-hood/5.png)
Your extension will be version-compatible with our publicly-built binary packages on. An extension allows you to develop independently: it may be compiled and linked using an external build system, against proprietary code. build/docs/html/index.html.Įxtensions are separate processes that communicate over a Thrift IPC channel to osquery core in order to register one or more plugins or virtual tables.
OSQUERY WATCHDOG INSTALL
To generate web-based documentation, you will need to install doxygen, run make docs from the repository root, then open.
![osquery watchdog osquery watchdog](https://www.loginsoft.com/wp-content/uploads/2020/06/schema-users.png)
The public API and SDK headers are documented via doxygen. This organization better isolates OS API dependencies from development tools and libraries and provides a logical separation between code needed for extensions and module compiling. This SDK can be used to build osquery outside of our CMake build system with a minimum set of dependencies. We call the set of public headers implementing core the 'osquery SDK'. Osquery is organized into a core, additional, and testing during a default build from source. The public headers can be found in /osquery/osquery/sdk/. The core code can be thought of as the framework or platform, it is everything except for the SQLite code and most table implementations. The osquery "public API" or SDK is the set of osquery headers and a subset of the source "cpp" files implementing what we call osquery core.