https://github.com/osquery/osquery logo
Title
h

hilt

04/01/2021, 2:43 AM
can anyone explain why I’m getting results like
/usr/sbin/agetty;5fae0533
in the path column from the processes table on linux? specifically the
5fae
bit is confusing - how can a process have multiple binaries?
d

defensivedepth

04/23/2021, 3:58 PM
I can't replicate this. What OS/version and version of osquery?