Hi all :slightly_smiling_face:. I was wondering if...
# general
u
Hi all 🙂. I was wondering if it's possible to make an osquery query that filters by occurrences? E.g. only show if windows_events ID X occurred more than 5 times.