https://github.com/osquery/osquery logo
#windows
Title
# windows
t

thor

07/23/2018, 3:22 PM
@Mustafa ah that could be, have you verified you don’t get duplicate events with the latest stable tag?
m

Mustafa

07/27/2018, 2:45 PM
with 3.2.9 both table are generating duplicate events (windows_events and powershell_events… for windows_events table i use the flag in my flag file windows_event_channels=Microsoft-Windows-PowerShell/Operational)
3 Views