Program

June 20

June 21

June 20 (Day 1)

June 20 - (Day 1)8:30 am - 9:30 am

Check-In / Breakfast

June 20 - (Day 1)9:30 am - 10:00 am

Introduction

Host

Trail of Bits

June 20 - (Day 1)10:00 am - 11:00 am

keynote

User Focused Security & Osquery

Jason Meller

Kolide
Slides

June 20 - (Day 1)11:00 am - 11:30 am

Production osquery

10 Pitfalls on the Path to Osquery Bliss

Zach Wasserman

Dactiv LLC
Slides

June 20 - (Day 1)11:30 am - 12:00 pm

osquery development

osql, the community-oriented osquery fork

Stefano Bonicatti & Mark Mossberg

Trail of Bits
Slides

June 20 - (Day 1)12:00 pm - 1:00 pm

Lunch

June 20 - (Day 1)1:00 pm - 1:45 pm

osquery development

Panel Discussion: the osquery Foundation

Teddy Reed & Ryan Wilson

Facebook
Slides

June 20 - (Day 1)1:45 pm - 2:00 pm

Break

June 20 - (Day 1)02:00 pm - 02:30 pm

osquery development

All you can do with extensions

Victor Vrantchan

Google
Slides

June 20 - (Day 1)2:30 pm - 3:00 pm

Production osquery

Taking Osquery to the Mainstream to Benefit Us All

Tania McCormack

Carbon Black
Slides

June 20 - (Day 1)3:00 pm - 3:30 pm

Production osquery

Monitoring Ephemeral Infrastructure with osquery

Matt Jane

Segment
Slides

June 20 - (Day 1)3:30 pm - 3:45 pm

Break

June 20 - (Day 1)3:45 pm - 4:15 pm

osquery Internals

Internals: how osquery uses sqlite3 and rocksdb

Alex Malone

AlienVault
Slides

June 20 - (Day 1)4:15 pm - 4:45 pm

Production osquery

Osquery across compliance, monitoring, risk and threat hunting

Hugh Neale

Zercurity
Slides

June 20 - (Day 1)5:00 pm - 8:00 pm

After-hours event

Off-Site Dinner & Drinks

Mailroom

June 21 (Day 2)

June 21 - (Day 2)8:30 am - 9:30 am

Check-In / Breakfast

June 21 - (Day 2)9:30 am - 10:00 am

Production osquery

Queries as Building Blocks for Your Security Framework

Jon Nelson

Carbon Black
Slides

June 21 - (Day 2)10:00 am - 10:30 am

osquery development

Linux security event monitoring with osquery

Alessandro Gario

Trail of Bits
Slides

June 20 - (Day 1)10:30 am - 11:00 am

Production osquery

Using macOS Spotlight and Osquery to Prevent Data Breaches

Fritz Ifert-Miller

Kolide
Slides

June 21 - (Day 2)11:00 am - 11:30 am

osquery Development

Building and Distribution: The Kolide Launcher for Osquery

Joseph Sokol-Margolis

Kolide
Slides

June 20 - (Day 1)11:30 am - 12:00 pm

osquery Development

Enriching osquery with 'event-driven' extensions

Atul Kabra

PolyLogyx
Slides

June 21 - (Day 2)12:00 pm - 1:00 pm

Lunch

June 21 - (Day 2)1:00 pm - 4:00 pm

workshop

Community Workshop

Various osquery leaders

June 21 - (Day 2)4:00 pm - 4:30 pm

Wrap-Up & Thank You

Host

Trail of Bits