osquery-1/specs/logged_in_users.table

13 lines
453 B
Plaintext
Raw Normal View History

2014-11-23 04:49:37 +00:00
table_name("logged_in_users")
description("Users with an active shell on the system.")
2014-11-23 04:49:37 +00:00
schema([
2016-08-13 05:09:57 +00:00
Column("type", TEXT, "Login type"),
2015-02-10 04:13:11 +00:00
Column("user", TEXT, "User login name"),
Column("tty", TEXT, "Device name"),
Column("host", TEXT, "Remote hostname"),
Column("time", INTEGER, "Time entry was made"),
2015-02-10 02:18:22 +00:00
Column("pid", INTEGER, "Process (or thread) ID"),
2014-11-23 04:49:37 +00:00
])
attributes(cacheable=True)
2014-11-23 04:49:37 +00:00
implementation("logged_in_users@genLoggedInUsers")