Hey there osquery gurus. I'd like to collect proce...
# macos
k
Hey there osquery gurus. I'd like to collect process and socket event data in a Catalina environment with SIP enabled. This needs adjustments to /etc/security/audit_control which is read-only. Any ideas around getting these events working?