Mark McCurdy

I also see that https://github.com/osquery/osquery/releases/download/5.0.1/osquery-5.0.1_1.linux_x86_64.tar.gz is an UNstripped version that does not have debug in the filename.

I'm seeing too many gaps and too little activity to rely on this plugin. I could contribute, but effort vs reward is in question.

Any idea how you plan to integrate this?

I'm getting this freeze years after the first report. Ubuntu 20.04 VM.

I had to use "print yara.**version**" to get your test to work. I can't figure out either which module executes the yara scan OR where is "yarascan" these days? Did...