auditctl -s: ```enabled 1
failure 0
pid 26628
rate...
# generals
shed7
10/31/2018, 3:02 PMauditctl -s:
Copy code
enabled 1
failure 0
pid 26628
rate_limit 0
backlog_limit 4096
lost 1
backlog 0
loginuid_immutable 0 unlockedshed7
10/31/2018, 3:05 PMthe pid is osqueryd
3 Views