https://github.com/osquery/osquery logo
#macos
Title
j

jackjack

03/14/2019, 6:46 PM
good day channel~ Can someone please remind me where I can see the hash of a file on Mac other than in the
file_events
table? Thanks!
z

zwass

03/14/2019, 6:47 PM
Use the
hash
table 🙂
j

jackjack

03/14/2019, 6:53 PM
I thought so too..but giving me blank values in md5, sha1 and sha256. Only seeing ssdeep