Does windows_crashes only fetch data from the minidump folder and we can't extract any data unless we manually create a dump file
Opened this issue · 0 comments
Vedang-Agarwal commented
Question
The question is regarding windows_crashes table on windows.
Currently I'm using windows 10 and osquery version 5.9.1 .
Is there any way to fetch data in the osquery tables without having to manually create dump files everytime we need to see the osquery outputs?
Does osquery only fetch data from the minidump folder only?