I don't see a filter limiting the json.aug file… are there known paths it does work on, or is it that it's specifically missing that which is causing it to not work?
z
zwass
04/22/2022, 3:52 PM
If you're on mac perhaps it's an permissions (FDA) issue?
a
allister
04/25/2022, 12:25 AM
I had been looking in my home folder while running osqueryi as me, but I also tried a path in /tmp that python's json.tool says is readable