Has that always been the experience?
# windowst
theopolis
09/23/2020, 7:10 PM
Has that always been the experience?
f
fritz
09/23/2020, 7:42 PMI am not sure, I feel like the answer is no but I honestly couldn't say for certain.
fritz
09/23/2020, 7:43 PMI have been noodling on the idea of trying to recursively descend using sqlite cte's as a workaround, but standard osquery recursive globbing would definitely be preferred.
t
theopolis
09/25/2020, 2:28 AM
I think the standard globbing is the expected behavior. If that has not worked in early 4.x versions or late 3.x versions it's a critical bug.
f
fritz
09/25/2020, 1:01 PM@theopolis 👍 I just went back through 4 different versions of osquery and they are all affected so far as I can tell. I will submit a bug report.
fritz
09/25/2020, 1:14 PM