que pasa amigos? I have some issues with osquery f...
# general
e
que pasa amigos? I have some issues with osquery file integrity monitoring on Ubuntu 16, i have pack, included in /etc/osquery/osquery.conf
Copy code
{
  "queries": {
    "file_events": {
      "query": "SELECT * FROM file_events;",
      "removed": false,
      "interval": 300
    }
  },
  "file_paths": {
    "homes": [
      "/root/.ssh/%%",
      "/home/%/.ssh/%%"
    ],
    "etc": [
      "/etc/%%"
    ],
    "home": [
      "/home/%%"
    ],
    "tmp": [
      "/tmp/%%"
    ],
    "www": [
      "/var/www/%%"
    ]
  }
}