https://github.com/osquery/osquery logo
Title
n

nebi

02/22/2019, 7:59 AM
Anyone knows what pid -1 means for open_sockets table?
s

shadejinx

02/22/2019, 4:45 PM
I believe that means the process that spawned that socket is dead when the query was run.