https://github.com/osquery/osquery logo
#kolide
Title
# kolide
f

fritz

09/17/2021, 3:52 PM
@Marc-Antoine Girard, our Checks feature runs on an intermittent schedule and notifies users of issues once a day, if you wanted to real-time alert on removable media insertions you could: ā€¢ Configure a scheduled query in the Log Pipeline and then build alerts in your configured log platform ā€¢ Configure a recurring Live Query and then access/alert based on the results of that query using the API
m

Marc-Antoine Girard

09/17/2021, 4:00 PM
Thanks for the answer!
šŸ™Œ 1
f

fritz

09/17/2021, 4:13 PM
Happy to help šŸ™‚
4 Views