Cameron Just
02/01/2021, 3:52 AMCptOfEvilMinions
02/01/2021, 4:23 AMCameron Just
02/01/2021, 5:39 AMCptOfEvilMinions
02/01/2021, 4:52 PMSElinux
on Centos like systems and AppArmor
on Debian based systems are blocking Osquery. I doubt this is the problem but is something to check.
• Also run osqueryd
with the --verbose
flag to see if any errors are printed to the screen
• Another thing to try is to setup something like AuditD + Golang. Then re-run your test and review the results. This would allow you to determine if it’s a system issue or an Osquery issueCameron Just
02/02/2021, 1:32 AMCptOfEvilMinions
02/02/2021, 3:13 PMStefano Bonicatti
02/06/2021, 2:25 PM