Good evening. I am using “authorized_keys” query t...
# general
l
Good evening. I am using “authorized_keys” query to search for ssh keys in the auth keys file. I tried looking through the code but I’m not sure I fully understand how osquery determines the location of authorized keys file. I have seen some unique use cases where the keys are in non standard places and I want to make sure I pick those up.