We will roll up a fix for that. And while we are a...
# eclecticiq-polylogyx-extensiono
OpenPlgx
12/01/2021, 3:52 PMWe will roll up a fix for that. And while we are at it, and given you are a sysmon user as well, we observed that sysmon doesn't give events for mounted drives. How useful would you say it is, if any.
l
lvferdi
12/02/2021, 4:05 PMuseful, especially in PCI environments or other regulated environments where the use of external media is heavily governed.
lvferdi
12/02/2021, 4:17 PMand I answered about removable media not mounted drives. If osquery doesn't provide that natively it would be very useful.
9 Views