defensivedepth
02/16/2021, 7:02 PMMike Myers
02/17/2021, 2:41 AMquick way to generate some Windows events?Nevermind, got it. My problem was that you have to explicitly enable the event subscriber and publisher with osquery flags:
osqueryi.exe --disable_events=false --windows_event_channels="System,Application,Setup,Security" --enable_windows_events_publisher=true --enable_windows_events_subscriber=true
Yea, so I tested with it a bit and it works for me (windows 10
)Juan Alvarez
02/17/2021, 9:46 AMdefensivedepth
02/17/2021, 1:41 PMJuan Alvarez
02/17/2021, 1:52 PM