Most of the work will be in <https github com facebook osque osquery #core

Most of the work will be in: <https://github.com/f...

t

theopolis

10/20/2016, 8:22 PM

Most of the work will be in: https://github.com/facebook/osquery/blob/master/osquery/sql/virtual_table.cpp https://github.com/facebook/osquery/blob/master/osquery/dispatcher/scheduler.cpp (also check https://github.com/facebook/osquery/blob/master/osquery/config/config.cpp#L230 ) https://github.com/facebook/osquery/blob/master/osquery/events/events.cpp