Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
b
Ben
01/21/2021, 3:43 AM
Also, as I understand it, standard FIM file access distinct from enabling process_file_events. Is this correct?
t
theopolis
01/21/2021, 2:09 PM
Right, your understanding is correct
🙏 1
#macos
Join Slack