if you dont want to live with the default behaviour use even osquery #general

if you dont want to live with the default behaviou...

npamnani

03/23/2018, 12:19 PM

if you dont want to live with the default behaviour use --events_optimize=false