as <https://github.com/facebook/osquery/pull/5084>...
# general
u
as https://github.com/facebook/osquery/pull/5084 says, curl is non-blocking sockets,so socket_events can't be record the curl event.but the reality is that curl can be recorded.