Hello everyone. Does anyone know how can i fix thi...
# windows
t
Hello everyone. Does anyone know how can i fix this? osquery.conf file is as: { // Configure the daemon below: "options": { "event_publisher": "etw_process_publisher", "enable_ntfs_event_publisher": true }, "schedule": { "chrome_extensions": { "query": "SELECT * from users;", "interval": 3600 } } } when i run osqueryd.exe --config_path="C:\Program Files\osquery\osquery.conf", i got the following error: I0212 13:55:33.071751 8240 eventfactory.cpp:156] Event publisher not enabled: etw_process_publisher: etw_process_publisher publisher disabled via configuration. How can i solve it?