Hello! I've been trying to find a work-around solution for getting socket_events for OSX devices. I know it doesn't exist, but I wanted to try out scnetworks event, but when I start my osqueryd it says
Event publisher not enabled: scnetwork: Publisher not used
in my flags file, --disable_events=false is definitely there
I've checked that process_events work fine, but how can I get scnetworks table to show up?