Zach Zeid
12/15/2020, 11:20 AM4.6.0
cut, when will it be available via package manager? The site still shows 4.5.1
as being the latest.alessandrogario
12/15/2020, 11:22 AMZach Zeid
12/15/2020, 11:24 AMseph
12/15/2020, 11:55 AMZach Zeid
12/15/2020, 12:00 PMtheopolis
12/15/2020, 2:00 PMZach Zeid
12/15/2020, 2:06 PMdistributed
endpoints, so if someone had access to a box w/ osquery on it, the most they could do is write to files on that box?seph
12/15/2020, 2:18 PMZach Zeid
12/15/2020, 2:18 PMseph
12/15/2020, 2:19 PMZach Zeid
12/15/2020, 2:21 PM...someone who has administrative access...that reads to me someone whose on a box running
sudo osqueryi
and writing arbitrary sqlite files to disk. Which could also be done via any fleet manager that has distributed
enabled?seph
12/15/2020, 2:21 PMZach Zeid
12/15/2020, 2:22 PM