thanks < obelisk> < thor> i think i figured it out with `sel osquery #general

thanks <@U2BLWN1DF> <@U0JT049S4> i think i figured...

jjediny

07/24/2017, 4:30 PM

thanks @obelisk @thor i think i figured it out with

select * from shell_history where command like "sudo%";