do you have a sense of what kinds of performance i...
# macos
a
do you have a sense of what kinds of performance impacts we'll see by enabling the set of probes suggested on this page? https://github.com/facebook/osquery/blob/master/docs/wiki/deployment/process-auditing.md#macos-process-auditing
this benchmark suggests we'll see a significant increase in xcodebuild times if we enable more than 50 probes: https://tramdas.wordpress.com/2016/08/05/a-high-level-evaluation-of-the-openbsm-audit-system-in-os-x/
so i was trying to do a count of how many probes the suggested docs would enable, and i think it's def over 50. I could be totally misunderstanding how this system works and what counts as a
probe
though
n
@obelisk all of the above relates to my previous question 🙂 thanks