but I haven’t come across any. It looks like maybe this was planned, but never done? Anybody have any pointers here? I’d love to contribute that back to docs.
? Looks under documented, but somewhat introduced in https://github.com/osquery/osquery/pull/4626 I’d say enable it and see if it works, then doc it 🙂