https://github.com/osquery/osquery logo
#general
Title
# general
s

Stefano Bonicatti

07/20/2022, 1:26 PM
this means that the query runs, consumes the process events, the query doesn’t return results because it doesn’t match your constraints, and then at the next run there’s no process event to match your socket event