passitive detect for process new-add or delete ? c...
# general
x
passitive detect for process new-add or delete ? can osquery?