Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
l
Loy Glenn
08/20/2019, 6:08 PM
FYI all - if you don't see all of the DELETE events that you believe should exist in the win_file_events table, be sure that it really is a deletion and not a file being moved to the recycle bin. For more information, see the snippet in this thread.
👍 1
Untitled
2 Views
#eclecticiq-polylogyx-extension
Join Slack