From cbe14d1f9e2a69058c9a937752e0ef5a41667aab Mon Sep 17 00:00:00 2001 From: Gabriel Bochini <135612322+gbocchini@users.noreply.github.com> Date: Mon, 31 Aug 2026 13:27:28 -0300 Subject: [PATCH 1/2] 148726.md --- solutions/security/investigate/osquery.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/solutions/security/investigate/osquery.md b/solutions/security/investigate/osquery.md index 7d08fde199..244f8016c4 100644 --- a/solutions/security/investigate/osquery.md +++ b/solutions/security/investigate/osquery.md @@ -248,6 +248,8 @@ To save a query: {applies_to}`stack: ga 9.5+` {applies_to}`serverless: ga` This frequency applies when the query is added to a pack that uses an **Interval** schedule. If the pack uses a **Date & time** schedule, the query inherits the [pack schedule](#osquery-set-pack-schedule) instead. * The minimum [version of Osquery](https://github.com/osquery/osquery/releases) required to run the query. * The operating system required to run the query. For information about supported platforms per table, refer to the [Osquery schema](https://osquery.io/schema). + + * All query results are [snapshot logs](https://osquery.readthedocs.io/en/stable/deployment/logging/#snapshot-logs) that represent a point in time with a set of results, with no [differentials] (https://osquery.readthedocs.io/en/stable/deployment/logging/#differential-logs). 3. Click **Test configuration** to test the query and any mapped fields: From 57ae8db7f5f6b808e8e35b36baf73f38ec165eab Mon Sep 17 00:00:00 2001 From: Gabriel Bochini <135612322+gbocchini@users.noreply.github.com> Date: Mon, 31 Aug 2026 13:31:30 -0300 Subject: [PATCH 2/2] fix typio --- solutions/security/investigate/osquery.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/solutions/security/investigate/osquery.md b/solutions/security/investigate/osquery.md index 244f8016c4..80e19634bc 100644 --- a/solutions/security/investigate/osquery.md +++ b/solutions/security/investigate/osquery.md @@ -249,7 +249,7 @@ To save a query: * The minimum [version of Osquery](https://github.com/osquery/osquery/releases) required to run the query. * The operating system required to run the query. For information about supported platforms per table, refer to the [Osquery schema](https://osquery.io/schema). - * All query results are [snapshot logs](https://osquery.readthedocs.io/en/stable/deployment/logging/#snapshot-logs) that represent a point in time with a set of results, with no [differentials] (https://osquery.readthedocs.io/en/stable/deployment/logging/#differential-logs). + * All query results are [snapshot logs](https://osquery.readthedocs.io/en/stable/deployment/logging/#snapshot-logs) that represent a point in time with a set of results, with no [differentials](https://osquery.readthedocs.io/en/stable/deployment/logging/#differential-logs). 3. Click **Test configuration** to test the query and any mapped fields: