has anyone ever tested auditd running plus osquery...
# general
p
has anyone ever tested auditd running plus osquery auditing for unintended consequences like kernel oops? i understand you should not do this. im just more curious if you accidentally did and whether this could actually lead to corrupted the state of the kernel?