C:\ProgramData\osquery>osqueryd\osqueryd.exe --flagfile osquery.flags --verbose I1227 213417.225525 8936 init.cpp:416] osquery initialized [version=3.3.1] I1227 213417.240484 8936 system.cpp:402] Writing osqueryd pid (19364) to C:\programdata\osquery\osquery.pid I1227 213417.271402 8936 rocksdb.cpp:134] Opening RocksDB handle: C:\programdata\osquery\osquery.db I1227 213417.677335 8936 database.cpp:563] Checking database version for migration I1227 213417.679314 12084 interface.cpp:265] Extension manager service starting: \\.\pipe\osquery.em W1227 213429.802151 8936 extensions.cpp:728] Extension not autoloaded: plgx_win_extension I1227 213429.805888 8936 init.cpp:652] Cannot start extension manager: Extension not autoloaded: plgx_win_extension I1227 213429.805888 8936 auto_constructed_tables.cpp:86] Removing stale ATC entries I1227 213429.945755 8936 killswitch.cpp:60] enum osquery:Killswitch:IsEnabledError 1 (Cannot call registry item: ) I1227 213429.994423 7688 events.cpp:784] Starting event publisher run loop: windows_events