Hm, I think I get the default now, if you don’t set it/set it to

0

, it’ll use the

90

from https://github.com/facebook/osquery/blob/2.10.0/osquery/core/watcher.cpp#L54 and if I’m reading the code correctly the

80

is for restrictive and the

1000

is for disabled. Is that right?