Tyler Fisher
01/02/2020, 10:30 PMosquery> select name, value from osquery_flags where name like '%enable%' or name like '%disable%';
+----------------------------+---------------+
| name | value |
+----------------------------+---------------+
| aws_enable_proxy | false |
| carver_disable_function | true |
| config_enable_backup | false |
| disable_audit | false |
| disable_caching | false |
| disable_carver | true |
| disable_database | true |
| disable_decorators | false |
| disable_distributed | true |
| disable_enrollment | false |
| disable_events | false |
| disable_extensions | false |
| disable_forensic | true |
| disable_hash_cache | false |
| disable_logging | true |
| disable_memory | false |
| disable_reenrollment | false |
| disable_tables | Not Specified |
| disable_watchdog | true |
| enable_extensions_watchdog | false |
| enable_foreign | false |
| enable_killswitch | false |
| enable_numeric_monitoring | false |
| enable_signal_handler | false |
| enable_syslog | false |
| hardware_disabled_types | partition |
+----------------------------+---------------+