From 1d9299dea21cba911fd804ec96225de84920bd51 Mon Sep 17 00:00:00 2001 From: Eric Date: Wed, 27 Sep 2023 16:29:58 -0500 Subject: [PATCH] Regenerate osquery_fleet_schema.json (2023-09-26) (#14161) Changes: - Ran the `generate-merged-schema` script to regenerate `/schema/osquery_fleet_schema.json` --- schema/osquery_fleet_schema.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/schema/osquery_fleet_schema.json b/schema/osquery_fleet_schema.json index 2131d9142..f4dcfd8d6 100644 --- a/schema/osquery_fleet_schema.json +++ b/schema/osquery_fleet_schema.json @@ -3297,7 +3297,7 @@ ], "evented": false, "cacheable": true, - "notes": "", + "notes": "- This table should be used sparingly as it uses an Apple API which occasionally corrupts the underlying certificate. Learn more [here](https://github.com/fleetdm/fleet/issues/13065#issuecomment-1658849614).", "examples": "Replace 1QAZ2WSX with your Apple Developer ID, if you have one. This query will then let you identify Macs that have a copy of your code signing and notarization certificates.\n```\nSELECT * FROM certificates WHERE common_\"name\" LIKE '%%1QAZ2SWX%%';\n```", "columns": [ { @@ -12717,7 +12717,7 @@ ], "evented": false, "cacheable": false, - "notes": "", + "notes": "- This table should be used sparingly as it uses an Apple API which occasionally corrupts the underlying certificate. Learn more [here](https://github.com/fleetdm/fleet/issues/13065#issuecomment-1658849614).", "examples": "Identify Macs that contain certificates related to Apple application signing and notarization. (replace with your Apple Developer ID string)\n```\nSELECT * FROM keychain_items WHERE label LIKE '%8EHZ83LZNU%';\n```", "columns": [ {