Tyler Fisher
01/02/2020, 10:34 PMosquery> select name,value from osquery_flags where name = "extensions_socket";
+-------------------+--------------------------------+
| name | value |
+-------------------+--------------------------------+
| extensions_socket | /home/user/.osquery/shell.em |
+-------------------+--------------------------------+