Adam Kuncewitch

04/04/2022, 7:28 AM
any thoughts on why my kernel_integrity table is missing? i checked your codebase and there was no reference to that string that but looks like maybe it’s a kernel module we might need to compile with some kind of option? maybe it works automatically on supported operating systems?
Stefano Bonicatti

Stefano Bonicatti

04/04/2022, 8:59 AM
Hello @Adam Kuncewitch, seems the
table was depending on a kernel module named
that osquery was shipping, but in 2015 that kernel module has been removed https://github.com/osquery/osquery/commit/3103843e (was probably unused before then). The table though remained there till 2019, where has been removed together with other leftovers in the docs https://github.com/osquery/osquery/commit/19d4e3fc7