but it has to be user + device, and as far as osqu...
# general
g
but it has to be user + device, and as far as osquery is concerned it’s updating device attributes