Join Slack
Powered by
Hey there osquery gurus. I'd like to collect proce...
# macos
k
Keiran
09/16/2020, 6:08 PM
Hey there osquery gurus. I'd like to collect process and socket event data in a Catalina environment with SIP enabled. This needs adjustments to /etc/security/audit_control which is read-only. Any ideas around getting these events working?
Open in Slack
Previous
Next