About me
My name is Nick Comeau, and I have worked in cybersecurity for about a decade. I do not have a background in Computer Science or cybersecurity, but rather studied Biomedical Engineering and worked as an Electro-Chemical Scientist for several years out of school. Despite lacking knowledge in CS or cybersecurity, I made the leap into the industry, working for a vendor in a variety of different roles over my time there. In that period of time, my knowledge, and interest, in cybersecurity grew exponentially. While I still have much to learn, I grew particularly passionate about EDR (Endpoint Detection and Response), and proceeded to co-found a company attempting to address this goal. However, my focus for a presentation is regarding utilization of a particular open-source tool I am passionate about; osquery. Osquery turns all of your endpoints into dynamically-generated relational databases, enabling the admin to ask simple questions of their environment, in a standardized format, and retrieve critical information. This simple data harvesting can aid in optimizing security investigations, day-to-day IT operations, and much more!