< b0l> I publish osquery to WEL but at this time I cannot su osquery #windows

<@U9RB3C3HR> I publish osquery to WEL but at this...

lvferdi

01/31/2019, 12:46 PM

@b0l I publish osquery to WEL but at this time I cannot subscribe to the channel. I have been able to in the past but have not been able to recently.

lvferdi

01/31/2019, 1:14 PM

to read the WEL for osquery subscribe to the

osquery

channel in event log. Trying to use the

Facebook/osquery

path as you would with other log types doesn’t work.

b0l

01/31/2019, 5:57 PM

yeah, I tried it after manifest installation

5 Views

Open in Slack

Previous Next