diff --git a/Endpoints/Windows/osquery.conf b/Endpoints/Windows/osquery.conf index 5038496..dade4da 100755 --- a/Endpoints/Windows/osquery.conf +++ b/Endpoints/Windows/osquery.conf @@ -13,7 +13,7 @@ }, "certificates_snapshot": { "query": "SELECT * FROM certificates WHERE path != 'Other People';", - "interval": 86400, + "interval": 28800, "description": "List all certificates in the trust store (snapshot query)", "snapshot": true },