mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 18:33:54 +00:00
16 lines
673 B
Plaintext
16 lines
673 B
Plaintext
|
table_name("registry")
|
||
|
|
description("All of the Windows registry hives.")
|
||
|
|
schema([
|
||
|
|
Column("hive", TEXT, "The parent registry hive where the key and value exist"),
|
||
|
|
Column("key", TEXT, "Name of the key to search for"),
|
||
|
|
Column("subkey", TEXT, "Name of the subkey for a given HIVE and key"),
|
||
|
|
Column("name", TEXT, "Name of the registry value entry"),
|
||
|
|
Column("type", TEXT, "Type of data associated with the registry value"),
|
||
|
|
Column("data", TEXT, "Data content of registry value"),
|
||
|
|
Column("mtime", BIGINT, "timestamp of the most recent registry write"),
|
||
|
|
])
|
||
|
|
implementation("system/windows/registry@genRegistry")
|
||
|
|
examples([
|
||
|
|
"select * from registry",
|
||
|
|
])
|