https://github.com/osquery/osquery logo
a

Anoop K V

05/27/2021, 9:29 AM
When Carving the files and the watcher is terminating the process as the thresholds are crossed, I see the temporary files created is not cleaned up properly. Is this expected or some config did I miss?
t

theopolis

05/30/2021, 3:02 AM
I think this is a bug, I don't remember seeing this sort of clean up in the code. Do you mind creating a GitHub issue for this?
a

Anoop K V

05/31/2021, 6:18 AM
Raised "Proper cleanup of temporary files not happeningĀ #7129". Thanks.
2 Views