<@U01UF245UTU>, our Checks feature runs on an inte...
# kolide
@Marc-Antoine Girard, our Checks feature runs on an intermittent schedule and notifies users of issues once a day, if you wanted to real-time alert on removable media insertions you could: ā€¢ Configure a scheduled query in the Log Pipeline and then build alerts in your configured log platform ā€¢ Configure a recurring Live Query and then access/alert based on the results of that query using the API
Thanks for the answer!
šŸ™Œ 1
Happy to help šŸ™‚