mirror of
https://github.com/empayre/fleet.git
synced 2024-11-06 08:55:24 +00:00
e82962e4a7
* create schema/tables, add yaml schema tables * Update osquery-table-details.ejs * Generate schema from schema/tables/ folder * Create generate-yaml-tables-from-json.js * update created table files * update fleet override validation * update error messages, add fleetRepoUrl * Delete generate-yaml-tables-from-json.js * Update osquery-table-details.ejs * Update whitespace in table examples * Revert "Update osquery-table-details.ejs" This reverts commit 2e9d63208f59997d492375ebaf1d0ec7e4afe468. * add YAML tables generated from updated Fleet schema * lint fixes * update arp_cache and docker_containers tables
39 lines
814 B
YAML
39 lines
814 B
YAML
name: certificates
|
|
description: "[Certificate
|
|
authorities](https://en.wikipedia.org/wiki/Certificate_authority) installed in
|
|
Keychains/ca-bundles."
|
|
examples: >-
|
|
Replace 1QAZ2WSX with your Apple Developer ID, if you have one. This query
|
|
will then let you identify Macs that have a copy of your code signing and
|
|
notarization certificates.
|
|
|
|
```
|
|
|
|
SELECT * FROM certificates WHERE common_"name" LIKE '%%1QAZ2SWX%%';
|
|
|
|
```
|
|
columns:
|
|
- name: sid
|
|
platforms:
|
|
- windows
|
|
- name: store_location
|
|
platforms:
|
|
- windows
|
|
- name: store
|
|
platforms:
|
|
- windows
|
|
- name: username
|
|
platforms:
|
|
- windows
|
|
- name: store_id
|
|
platforms:
|
|
- windows
|
|
- name: issuer2
|
|
platforms:
|
|
- linux
|
|
- darwin
|
|
- name: subject2
|
|
platforms:
|
|
- linux
|
|
- darwin
|