Hello all, I was wondering in the Osquery.conf when you refer to the packs you want to use, in the packs section. Does this automatically add those queries to the deamon. Or do queries NEED to be explicitly written in the osquery.conf to be executed by the daemon.
04/23/2018, 1:54 AM
it will add all the queries defined in the pack(s) into the daemon schedule to be executed.