On linux, i am using process_events table and do get the logs when a process is executed. But don't get any notificaiton when the process exits. I would like to track both process start and exits.
is there any other table where i can get this ? any idea how to track both process exits using osquery ?
thank you.
