Title
#general
s

seph

03/07/2019, 3:58 PM
Generally osquery does not allow file extraction like that. You can take a look at the file carving sections, though itโ€™s often not enabled on endpoints.
g

Gabriel

03/07/2019, 6:52 PM
Thanks, I will take a look to carving ๐Ÿ˜Š