https://github.com/osquery/osquery logo
#general
Title
# general
v

ventura

08/01/2018, 2:03 PM
is there a way to get queries from the shell_history table to return history data from shells besides sh and bash?
s

spookerlabs

08/01/2018, 7:46 PM
Why not start to use process_events to monitor all commands ? In my opinion much more powerful and "realtime" compared to shell_history data
v

ventura

08/01/2018, 7:54 PM
I'm hoping to do both. I want the shell_history so that I can preserve information about redirects, like | or >
process_events works really well
5 Views