Brandon Mesa
11/01/2022, 6:45 PMsharvil
11/01/2022, 7:00 PMaction
here represents the event format of the result log (https://osquery.readthedocs.io/en/stable/deployment/logging/#event-format)Brandon Mesa
11/01/2022, 7:03 PMsharvil
11/01/2022, 7:04 PMBrandon Mesa
11/01/2022, 7:06 PMsharvil
11/01/2022, 7:08 PM--logger_event_type=false
Brandon Mesa
11/01/2022, 7:10 PMGavin
11/01/2022, 7:33 PMBrandon Mesa
11/01/2022, 7:34 PMGavin
11/01/2022, 7:42 PMcolumns.foo
in your queryBrandon Mesa
11/01/2022, 7:47 PMGavin
11/01/2022, 7:51 PMBrandon Mesa
11/01/2022, 7:52 PMGavin
11/01/2022, 7:54 PMBrandon Mesa
11/01/2022, 7:54 PMGavin
11/01/2022, 7:54 PMBrandon Mesa
11/01/2022, 8:04 PMseph
Brandon Mesa
11/01/2022, 8:43 PM