https://github.com/osquery/osquery logo
#general
Title
# general
I find that maybe the
watch_dog
settings aren't applied.
c

clong

01/22/2019, 9:09 PM
posted a response
u

钢铁侠

01/23/2019, 1:43 AM
osquery add his audit rule to the audit according to
audit_allow_config
. if the
audit_allow_config
is
false
,It means that the osquery will use the rules that exists before in the system but not add the rule it's own.
@clong
5 Views