https://github.com/osquery/osquery logo
Title
d

defensivedepth

12/06/2022, 1:00 PM
Can you provide some additional detail? Where are you seeing this?
j

jurelou

12/07/2022, 7:52 AM
Using osqueryi on windows 10, I noticed that in the
process_open_socket
table, there was an
ESTABLISHED
socket to multiple AWS ips (cloudfront). the pid was the one of
osqueryi.exe