https://github.com/osquery/osquery logo
Title
p

pickmansec

08/14/2017, 11:06 PM
I was looking at the yara table and it says “Track YARA matches for files or PIDs.” but it has no PID column
n

npratley

08/14/2017, 11:14 PM
I think that's just a typo in the docs... Files or directories maybe?
p

pickmansec

08/14/2017, 11:25 PM
yeah, it does support files but it would be cool if it supported memory
😀