Attending this event?
Back To Schedule
Sunday, June 5 • 3:30pm - 4:20pm
Don’t Fear The SQLite: querying databases for endpoint security

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

macOS uses an incredible number of SQLite databases at a system and user level, tracking things such as kernel extensions, downloaded files, browser histories, and more. This talk will cover where these databases are, how to extract their data, and then scaling out with osquery’s ATC subsystem.


Eric Kaiser

Uptycs, Inc
Eric is a Security Engineer at Uptycs, focused on endpoint and cloud security. He enjoys using his technical and interpersonal skills to build usable & secure infrastructure at scale, and in his spare time is an amateur motorcycle rider and mechanic, a runner, and an avid travele... Read More →

Sunday June 5, 2022 3:30pm - 4:20pm PDT
Theater 15
Feedback form isn't open yet.

Attendees (2)