<Not able to retrive file events info in osquery-p...
# community-feeds
r
Not able to retrive file events info in osquery-python I have a task to write a python program to retrive file and process information using osquery while program is running and we perform any operation on file at background. I have written the below code but it does'nt show any output. import osquery instance= osquery.SpawnInstance() instance.open() while True: results = instance.client.query("SELECT fe.action,fe.md5,p.gid,p.name,pe.mode FROM processes p JOIN process_events pe ON p.pid = pe.pid join file_events fe on pe.path=fe.target_path...