osquery-config-examples
reference corpus · status live · category GOOD (Design guidance & exemplars) · lane A · refresh pinned
What an agent uses it for
an agent writing host detections queries this for battle-tested osquery SQL by objective (suid diffs, persistence paths, launch items)
Use it
xerj corpus add --from https://raw.githubusercontent.com/xerj-org/xerj/corpus-hub/tools/xerj-code/hub/osquery-config-examples.jsonxerj corpus index osquery-config-examples → xerj code osquery-config-examples "your question"Sources & pins
| source | pin | licence | size | review note |
|---|---|---|---|---|
| osquery-config-examples | 89c2ae5c7fca… | MIT | 214.6 KB / 29 files | LICENSE.md at pin: MIT (Palantir). | profiler evidence: PROFILER 2026-10-02T00:49:45Z trees-only — files=29; backlog hint: Apache-2.0 (verify at pin); api licence: unknown; evidence: LICENSE.md→MIT |
214.6 KB across 29 files · added 2026-10-02
Rights
MIT — redistribution permitted with attribution per the licence review . The review block records a human opening each licence file at the pin; detector output is a hint, never the verdict.
Retrieval spot-check (G7)
4.0/5 median relevant (Wave 0 (bulk, all categories) stratified sample) — verdict: pass