@thor i’ve encountered some issues with osquery. These might be issue but firstly I want to inform you
Related to osquery.msi application which I’ve taken built (but also it may be valid for osquery.msi file too which is on the web site)
1- once the application is installed, after each repair process(right click at the msi file and click repair) the application size increases on add/remove programs control panel. (about 10 MB after each repair progress)
2- once the application is installed and just after each “second repair” process, the application raises up the warning message “You must restart your system for the configuration changes made to osquery to take effect…”
A-) Install the application
B-) (fisrt attempt) Click repair the application (no message)
C-) (second attempt) Click repair the application again (the warning message appears)
D-) Restart the computer
E-) (fisrt attempt) Click repair the application (no message)
D-)(second attempt) Click repair the application again (the warning message appears)
........continues in the same way
in this point related to 2
A-why not raised up the warning message in the first repair process
B-the second repair process is taking much time than the first one