osquery-go icon indicating copy to clipboard operation
osquery-go copied to clipboard

Is it possible to create event tables using osquery-go?

Open bradleyjkemp opened this issue 5 years ago • 0 comments

I'm hoping to create a custom "event" table (i.e. using https://osquery.readthedocs.io/en/stable/development/pubsub-framework rather than a traditional, on-demand generated table).

It seems like osquery-go might only support the on-demand generate table style though?

Entirely possible that this just isn't something you can do with a plugin, I couldn't find many details on the Thrift API to confirm this 🙂

bradleyjkemp avatar Sep 02 '20 16:09 bradleyjkemp