`sudo osqueryi --nodisable_events --nodisable_audi...
# general
c
sudo osqueryi --nodisable_events --nodisable_audit --audit_persist --verbose