Title
#extensions
v

vaar

07/11/2019, 3:22 PM
@seph what do you mean? I am trying to open History db, but it is locked by Chrome/Chomium so I can't run ATC queries. the only way is to copy the file
s

seph

07/11/2019, 5:35 PM
quickly testing, I think I’m wrong about this. But sqlite dbs can also be in WAL mode, which tends to behave similarly.
defensivedepth

defensivedepth

07/11/2019, 5:42 PM
@seph see this, I was able to get it working https://osquery.slack.com/archives/CBMR0L7SM/p1562864571064300
s

seph

07/11/2019, 5:56 PM
Did you avoid the file copy?
defensivedepth

defensivedepth

07/11/2019, 5:57 PM
Yes - just targeted the current users' Chrome history file and it worked fine. (With Chrome open and in use)
s

seph

07/11/2019, 5:59 PM
Interesting.
defensivedepth

defensivedepth

07/11/2019, 6:36 PM
When I manually open the db using the sqlite shell, and attempt to run a query, I get
Error: database is locked