SQL powered operating system instrumentation, monitoring, and analytics.
Publisher’s description
What is osquery?
osquery by osquery is open-source Windows software in the system utilities category. It ranks 4th by popularity among system utilities in this catalogue. It is written in C++.
Installation and requirements
The publisher provides MSI installers for 64-bit Windows. Installation asks for administrator rights. A silent install is possible with the installer’s documented switches. An MSI package is available for deployment with Group Policy, Intune or Configuration Manager.
Updates and version history
The current version is 5.24.0, released on October 11, 2026. The version history goes back to December 28, 2022: 13 releases, all linked to the official files. That is about 3.4 releases a year. The last update is less than a month old.
Popularity and file types
The Chocolatey package has been downloaded 1,556,972 times. The source code on GitHub (osquery/osquery) has 23,659 stars. Similar programs include AutoHotkey, Bazel and Windows File Manager.
Project description on GitHub: “SQL powered operating system instrumentation, monitoring, and analytics.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- MSI package for managed deployment
- Documented silent install
- Updated in the last two months
- Large user base
Cons
- No native ARM64 build
- Installation needs administrator rights
In short: osquery is an open-source system utilitie tool for 64-bit PCs. Administrators can deploy it unattended.
Is osquery safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
5F123C07936EE927D7B44CCDAF5D01C4B9BAB2956328A4D8C7ADC3395812A659· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the osquery/osquery repository on GitHub by the Open Source Security Foundation, last run on October 19, 2026.
- Code review10
- Actively maintained10
- Security policy10
- No dangerous workflows10
- No binaries in the repository10
- Fuzzing10
- Licence declared9
- Branch protection8
- OpenSSF Best Practices badge5
- Restricted token permissions0
- Signed releases0
- Pinned dependencies0
- Static code analysis0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 13 versions ›13 versions over 4 years · about 3.4 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 5.24.0Latest | October 11, 2026 | — | 64-bit MSI |
| 5.23.1 | June 24, 2026 | — | 64-bit MSI |
| 5.23.0 | April 26, 2026 | — | 64-bit MSI |
| 5.22.1 | February 25, 2026 | — | 64-bit MSI |
| 5.21.0 | December 18, 2025 | — | 64-bit MSI |
| 5.20.0 | October 24, 2025 | — | 64-bit MSI |
| 5.19.0 | August 13, 2025 | — | 64-bit MSI |
| 5.18.1 | June 25, 2025 | — | 64-bit MSI |
Install from the command line
Silent install ›winget install --id osquery.osquery -echoco install osquery -yscoop install main/osquerymsiexec /i osquery-5.24.0.msi /qn /norestartmsiexec /x {C31D86CB-6E56-4661-A798-3DCC57A6EEC7} /qn /norestartRelated guide: How to use winget: install and update apps
Also for other systems
brew install --cask osqueryInformation
- Publisher
- osquery
- Category
- System utilities
- Licence
- Apache-2.0 OR GPL-2.0-only
- Price
- Free
- Source code
- github.com/osquery/osquery
- Written in
- C++
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- MSI
- Version
- 5.24.0
- Released
- October 11, 2026
- Added to the catalogue
- December 28, 2022
- Versions listed
- 13
- Updates / year
- 3.4
- Chocolatey downloads
- 1,556,972
- GitHub stars
- 23,659
- GitHub forks
- 2,624
- Website
- osquery.io
- winget ID
- osquery.osquery
- Chocolatey package
- osquery
- Scoop package
- main/osquery
- MSI product code
- {C31D86CB-6E56-4661-A798-3DCC57A6EEC7}
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to osquery
See all ›-
Open source7.8M ↓ -
Open source523.5K ↓ -
Open source6.1K ↓ -
LocalSend1.18.2Share files to nearby devices. Free, open source, cross-platform. An open source cross-platform alternative to AirDrop.Open source69.6K ↓ -
Simplenote2.24.0Simplenote is an easy way to keep notes, lists, ideas and more. Your notes stay in sync with all your devices for free.Open source33.6K ↓ -
Gauge1.6.28Free and open source test automation framework that takes the pain out of acceptance testingOpen source105.2K ↓ -
Ditto3.25.113.0Ditto is an extension to the Windows Clipboard. You copy something to the Clipboard and Ditto takes what you copied and stores it in a database to retrieve at a later time.Open source459.2K ↓ -
Hydrus Networkv665A personal booru-style media tagger that can import files and tags from your hard drive and popular websites. Content can be shared with other users via user-run servers.Open source136.4K ↓
Frequently asked questions
Is osquery free?
Yes. osquery is open-source software under the Apache-2.0 OR GPL-2.0-only licence.
Is osquery safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install osquery with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Can osquery be installed silently?
Yes. The silent install page lists the exact command for each installer, including msiexec for the MSI package.
Does osquery run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of osquery?
The versions page lists all 13 versions with links to their official installer files, back to December 28, 2022.
What are alternatives to osquery?
AutoHotkey, Bazel, Windows File Manager, LocalSend and Simplenote. The alternatives page compares them.
