Title
#windows
l

lvferdi

01/31/2019, 12:46 PM
@b0l I publish osquery to WEL but at this time I cannot subscribe to the channel. I have been able to in the past but have not been able to recently.
1:14 PM
to read the WEL for osquery subscribe to the
osquery
channel in event log. Trying to use the
Facebook/osquery
path as you would with other log types doesn’t work.
b

b0l

01/31/2019, 5:57 PM
yeah, I tried it after manifest installation