fleet/schema/tables/file.yml
Eric e82962e4a7
Add Fleet override schema files (#8278)
* create schema/tables, add yaml schema tables

* Update osquery-table-details.ejs

* Generate schema from schema/tables/ folder

* Create generate-yaml-tables-from-json.js

* update created table files

* update fleet override validation

* update error messages, add fleetRepoUrl

* Delete generate-yaml-tables-from-json.js

* Update osquery-table-details.ejs

* Update whitespace in table examples

* Revert "Update osquery-table-details.ejs"

This reverts commit 2e9d63208f59997d492375ebaf1d0ec7e4afe468.

* add YAML tables generated from updated Fleet schema

* lint fixes

* update arp_cache and docker_containers tables
2022-10-18 14:13:42 -05:00

39 lines
740 B
YAML

name: file
examples: >-
List zip files in the downloads folder as well as their associated sha256
hash.
```
SELECT f.path, h.sha256 FROM file f JOIN hash h ON f.path = h.path WHERE f.path LIKE '/Users/%/Downloads/%%.zip';
```
columns:
- name: attributes
platforms:
- windows
- name: volume_serial
platforms:
- windows
- name: file_id
platforms:
- windows
- name: file_version
platforms:
- windows
- name: product_version
platforms:
- windows
- name: original_filename
platforms:
- windows
- name: bsd_flags
platforms:
- darwin
- name: pid_with_namespace
platforms:
- linux
- name: mount_namespace_id
platforms:
- linux