Title
#macos
a

atom

12/04/2018, 10:31 PM
do you have a sense of what kinds of performance impacts we'll see by enabling the set of probes suggested on this page? https://github.com/facebook/osquery/blob/master/docs/wiki/deployment/process-auditing.md#macos-process-auditing
10:32 PM
this benchmark suggests we'll see a significant increase in xcodebuild times if we enable more than 50 probes: https://tramdas.wordpress.com/2016/08/05/a-high-level-evaluation-of-the-openbsm-audit-system-in-os-x/
10:33 PM
10:34 PM
so i was trying to do a count of how many probes the suggested docs would enable, and i think it's def over 50. I could be totally misunderstanding how this system works and what counts as a
probe
though
n

nunu

12/04/2018, 10:42 PM
@obelisk all of the above relates to my previous question 🙂 thanks