or select from hash where directory = c windows osquery #general

or select * from hash where directory = "c:\window...

m

mcgrew

09/27/2016, 10:12 PM

or select * from hash where directory = "c:\windows\";