osquery-1/specs/darwin/startup_items.table

table_name("startup_items")
description("Applications and binaries set as user/login startup items.")
schema([
    Column("name", TEXT, "Name of startup item"),
    Column("path", TEXT, "Path of startup item"),
    Column("type", TEXT, "Startup Item or Login Item"),
    Column("source", TEXT, "Directory or plist containing startup item"),
])
attributes(cacheable=True)
implementation("startup_items@genStartupItems")
fuzz_paths([
    "/System/Library/StartupItems/",
    "/Library/StartupItems/",
    "/Library/Preferences/com.apple.loginitems.plist"
])
Add basic Mac startup items vtable 2014-10-30 01:10:26 +00:00			`table_name("startup_items")`
Add more table descriptions for API generation 2015-02-09 01:40:35 +00:00			`description("Applications and binaries set as user/login startup items.")`
Add basic Mac startup items vtable 2014-10-30 01:10:26 +00:00			`schema([`
Improve kextstat/startup_items code and perf 2014-11-27 09:45:35 +00:00			`Column("name", TEXT, "Name of startup item"),`
			`Column("path", TEXT, "Path of startup item"),`
Improve OSX apps table 2014-11-30 05:48:56 +00:00			`Column("type", TEXT, "Startup Item or Login Item"),`
Improve kextstat/startup_items code and perf 2014-11-27 09:45:35 +00:00			`Column("source", TEXT, "Directory or plist containing startup item"),`
Add basic Mac startup items vtable 2014-10-30 01:10:26 +00:00			`])`
Introduce table options (#2101) Table options includes a change to the Registry::call API for TablePlugins. When requesting route information or the 'columns' action, a new 'op' key is included. 2016-05-18 19:23:52 +00:00			`attributes(cacheable=True)`
Add basic Mac startup items vtable 2014-10-30 01:10:26 +00:00			`implementation("startup_items@genStartupItems")`
Add make fuzz (#2458) 2016-09-14 03:37:31 +00:00			`fuzz_paths([`
			`"/System/Library/StartupItems/",`
			`"/Library/StartupItems/",`
			`"/Library/Preferences/com.apple.loginitems.plist"`
			`])`