I suspect you can do those with `REGEX MATCH` but `cgroup co osquery #ebpf

I suspect you can do those with `REGEX_MATCH` but ...

s

seph

08/17/2022, 12:24 PM

I suspect you can do those with

REGEX_MATCH

but

cgroup_container_name

seems less fiddly 🙂

2 Views