then stop the daemon start the interactive try the query it osquery #general

then stop the daemon, start the interactive, try t...

j

jdive

10/19/2016, 3:21 PM

then stop the daemon, start the interactive, try the query, it matches