Hi,
Did anyone already succeeded to use osquery with auditd (using the multicast socket feature), I know the documentation says both can’t be used at the same time but I’m not sure if the multicast feature was ever considered
j
Jared Davenport
06/10/2019, 9:44 PM
I’m also curious about this. We’re you able to find your answer?