ocsf-schema icon indicating copy to clipboard operation
ocsf-schema copied to clipboard

Currently unable to report effective user (`euid`) and effective group (`egid`) for MacOS without enabling the Linux profile

Open mlmitch opened this issue 6 months ago • 0 comments

As the title states, the euid and egid fields are only enabled on the process object by selecting the Linux extension with the linux_users profile.

mlmitch avatar May 13 '25 17:05 mlmitch