https://github.com/osquery/osquery logo
Title
b

bao

06/12/2019, 6:40 PM
anyone ever add tables to osquery as described in this https://osquery.readthedocs.io/en/stable/development/creating-tables/
z

zwass

06/12/2019, 6:42 PM
Yes, many people have done so.
b

bao

06/12/2019, 6:51 PM
ahh ok should I be using
.\tools\make-win64-binaries.bat
to compile my own tables into osquery? I tried that and it doesn't seem to add my table ot osqueryi.exe
z

zwass

06/12/2019, 6:52 PM
Yes I believe if you have followed the steps in the doc that would work.
p

packetzero

06/12/2019, 7:31 PM
Blow away build directory and build again. Perhaps you added your spec file after an initial build?
b

bao

06/12/2019, 7:37 PM
interesting I would think that I could rerun that script again without having to blow away the build folder
p

packetzero

06/12/2019, 8:33 PM
You are an optimist. 😀 It should work like that, but I have seen times where I have to start fresh with changes to spec files.
z

zwass

06/12/2019, 8:35 PM
I believe it does work when invoking cmake directly, but I think that script may do some funky stuff.
b

bao

06/12/2019, 8:59 PM
is there a preferable way to do it on windows?