fleet/tools/osquery-testing/queries.txt
2022-08-17 14:36:17 -04:00

7 lines
269 B
Plaintext

# Each line should contain a single query with no LIMIT clause and no semicolon.
# LIMIT 3 will be automatically added by the script.
processes: select * from processes
users: select * from users
user_ssh_keys: select * from users cross join user_ssh_keys using (uid)