Linux Specific

Many VQL plugins and functions provide access to the Linux APIs. The following are only available when running on Linux.

Plugin/FunctionTypeDescription
auditPluginRegister as an audit daemon in the kernel