So basically any inode metadata change is reflected by the c osquery #general

So basically any inode metadata change is reflecte...

Stefano Bonicatti

10/16/2019, 5:57 PM

So basically any inode metadata change is reflected by the ctime, mtime reflects file data changes