< brandon> ATTRIBUTES MODIFIED doesn t seem to refer to modi osquery #general

<@UB2083719> ATTRIBUTES_MODIFIED doesn't seem to r...

Stefano Bonicatti

10/16/2019, 5:49 PM

@brandon ATTRIBUTES_MODIFIED doesn't seem to refer to modified time, this is relevant:

Copy code

{kFSEventStreamEventFlagItemChangeOwner, "ATTRIBUTES_MODIFIED"},
    {kFSEventStreamEventFlagItemXattrMod, "ATTRIBUTES_MODIFIED"},
    {kFSEventStreamEventFlagItemInodeMetaMod, "ATTRIBUTES_MODIFIED"},

Open in Slack

Previous Next