zwass
06/12/2018, 1:33 PMnNipsx
06/12/2018, 1:34 PMzwass
06/12/2018, 1:36 PMnNipsx
06/12/2018, 1:37 PMzwass
06/12/2018, 1:38 PMnNipsx
06/12/2018, 1:38 PMzwass
06/12/2018, 1:39 PMnNipsx
06/12/2018, 1:39 PMzwass
06/12/2018, 1:40 PMnNipsx
06/12/2018, 1:40 PMzwass
06/12/2018, 1:40 PMnNipsx
06/12/2018, 1:40 PMzwass
06/12/2018, 1:40 PMnNipsx
06/12/2018, 1:42 PMzwass
06/12/2018, 2:47 PM/tmp/osquery_result
on the Fleet server by default--osquery_result_log_file
nNipsx
06/12/2018, 2:48 PMzwass
06/12/2018, 2:49 PMselect * from time
with an interval of 30 seconds. Make sure the pack actually targets some hostsnNipsx
06/12/2018, 2:55 PMzwass
06/12/2018, 5:58 PMnNipsx
06/12/2018, 6:18 PMnNipsx
06/13/2018, 3:50 PM