Stefano Bonicatti

06/11/2019, 5:23 PM
Who's the owner? As far as I recall it has to be either root (Unix), an admin (on Windows), or the same user which the osquery process is running under (more relevant on Windows when running as SYSTEM)

Jean M

06/12/2019, 3:47 PM
Solved. It was root, using path with u=rwx, extension file with u=rx works, thanks.
🎉 1