https://github.com/osquery/osquery logo
s

Stefano Bonicatti

07/20/2022, 1:14 PM
Something I realized, you’re querying the process_events table but you need to enable events for that table too with
audit_allow_process_events