Title
#general
zwass

zwass

08/03/2018, 5:57 PM
If you run the query like that with
osqueryi
it's going to try to get the results immediately which means there will be no events.
n

nebi

08/03/2018, 6:03 PM
@zwass so how should I query for ?