Hello everyone, there are so many different linux distros out there you could use and install osquery. Are all of the implemented tables working for each linux distro?
04/03/2023, 12:34 PM
Yeah, that is the problem with Linux….
Not all tables are going to work on all platforms. It depends. None should crash, but they may not return data.
This is generally because not all data is meaningful. Rpm tables don’t mean much on dpkg platforms.
Tables based on core Linux features, or kernel functionality should generally work.