5
Improve docs on FIM, mention NTFS and Audit, etc. by mike-myers-tob · Pull Reque...
source link: https://github.com/osquery/osquery/pull/7036
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Conversation
The FIM docs needed some attention. They're out of date and didn't mention Audit-based FIM or NTFS Journal Events -based FIM. Users often have trouble setting it up.
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK