Hello in github releases there is osquery-macos-x8...
# macos
m
Hello in github releases there is osquery-macos-x86-64 and there is osqueryd-macos-bare what is the difference?
s
osqueryd-macos-bare just contains the
osqueryd
binary, while osquery-macos-x86-64 contains
osqueryd
inside the
<http://osquery.app|osquery.app>
app bundle -- certain functionality related to EndpointSecurity (
es_process_events
and
es_process_file_events
tables) requires the use of the app bundle
m
Thanks @sharvil