Zach Zeid08/20/2020, 4:16 PM
osqueryi "select * from osquery_flags where name = 'tls_server_certs'"
Zach Zeid08/20/2020, 4:19 PM
where for communicating with a tls endpoint. (which I guess is the case with aws firehose)
, which is how I assumed you'd want to communicate with your own tls_endpoint?