<Osquery-auditd compability> Hi guys! Who has expe...
# community-feeds
r
Osquery-auditd compability Hi guys! Who has expertise on how to work with osquery (or maybe you solved this problem): Based on articles like this one - https://blog.palantir.com/auditing-with-osquery-part-two-configuration-and-implementation-87a8bba0ef48 I understand osquery can be used in conjunction with auditd rules in auditd/audit.rules. However, when I try to change in osquery.flags...