osquery-1/specs/posix/firefox_addons.table

table_name("firefox_addons")
description("Firefox browser extensions, webapps, and addons.")
schema([
    Column("uid", BIGINT, "The local user that owns the addon",
        additional=True),
    Column("name", TEXT, "Addon display name"),
    Column("identifier", TEXT, "Addon identifier", index=True),
    Column("creator", TEXT, "Addon-supported creator string"),
    Column("type", TEXT, "Extension, addon, webapp"),
    Column("version", TEXT, "Addon-supplied version string"),
    Column("description", TEXT, "Addon-supplied description string"),
    Column("source_url", TEXT, "URL that installed the addon"),
    Column("visible", INTEGER, "1 If the addon is shown in browser else 0"),
    Column("active", INTEGER, "1 If the addon is active else 0"),
    Column("disabled", INTEGER,
      "1 If the addon is application-disabled else 0"),
    Column("autoupdate", INTEGER,
      "1 If the addon applies background updates else 0"),
    Column("native", INTEGER,
      "1 If the addon includes binary components else 0"),
    Column("location", TEXT, "Global, profile location"),
    Column("path", TEXT, "Path to plugin bundle"),
    ForeignKey(column="uid", table="users"),
])
attributes(user_data=True)
implementation("applications/browser_firefox@genFirefoxAddons")
fuzz_paths([
    "/Library/Application Support/Firefox/Profiles/",
    "/Users",
])