https://github.com/osquery/osquery logo
s

slevchenko

10/19/2022, 12:28 PM
The weird thing about this query that it works sometimes, like in 20% of cases. One of 5 times it actually retrieves expected result, so if I'm establishing test connection, using netcat, sometimes I see this connection in a resulting table retrieved in response to this query