mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 01:55:20 +00:00
21 lines
690 B
Plaintext
21 lines
690 B
Plaintext
|
table_name("elf_segments")
|
||
|
|
description("ELF segment information.")
|
||
|
|
schema([
|
||
|
|
Column("name", TEXT, "Segment type/name"),
|
||
|
|
Column("offset", INTEGER, "Segment offset in file"),
|
||
|
|
Column("vaddr", INTEGER, "Segment virtual address in memory"),
|
||
|
|
Column("psize", INTEGER, "Size of segment in file"),
|
||
|
|
Column("msize", INTEGER, "Segment offset in memory"),
|
||
|
|
Column("flags", TEXT, "Segment attributes"),
|
||
|
|
Column("align", INTEGER, "Segment alignment"),
|
||
|
|
Column("path", TEXT, "Path to ELF file", required=True, index=True),
|
||
|
|
])
|
||
|
|
|
||
|
|
implementation("elf_info@getELFSegments")
|
||
|
|
examples([
|
||
|
|
"select * from elf_segments where path = '/usr/bin/grep'",
|
||
|
|
])
|
||
|
|
fuzz_paths([
|
||
|
|
"/usr/bin",
|
||
|
|
])
|