Samuel Carvalho
12/23/2020, 8:05 PMSELECT * FROM file_events;
theopolis
/etc
?Stefano Bonicatti
12/23/2020, 8:52 PM--enable_file_events
if you're using osquery 4.6.0theopolis
Subscriber disabled via configuration
for file_events
if this were 4.6.0