Speed up query performance of Santa extension
mike-myers-tob opened this issue · comments
Mike Myers commented
Implement a performance speedup on the new santa_allowed
table using the constraints feature, such that the santa_allowed
table can be queried faster using WHERE
clauses.
Example:
https://github.com/facebook/osquery/blob/master/osquery/tables/system/darwin/signature.mm#L252
Reference:
https://osquery.readthedocs.io/en/stable/development/creating-tables/