fleet/schema/tables/usb_devices.yml
Eric e82962e4a7
Add Fleet override schema files (#8278)
* create schema/tables, add yaml schema tables

* Update osquery-table-details.ejs

* Generate schema from schema/tables/ folder

* Create generate-yaml-tables-from-json.js

* update created table files

* update fleet override validation

* update error messages, add fleetRepoUrl

* Delete generate-yaml-tables-from-json.js

* Update osquery-table-details.ejs

* Update whitespace in table examples

* Revert "Update osquery-table-details.ejs"

This reverts commit 2e9d63208f59997d492375ebaf1d0ec7e4afe468.

* add YAML tables generated from updated Fleet schema

* lint fixes

* update arp_cache and docker_containers tables
2022-10-18 14:13:42 -05:00

12 lines
328 B
YAML

name: usb_devices
examples: >-
Identify Yubikeys currently connected. The model field contains information
about what authentication protocols the keys are configured to support. This
table can be used to track any type of USB device.
```
SELECT model, vendor, version FROM usb_devices WHERE vendor='Yubico';
```