osquery-1/specs/darwin/keychain_items.table

table_name("keychain_items")
description("Generic details about keychain items")
schema([
    Column("label", TEXT, "Generic item name"),
    Column("description", TEXT, "Optional item description"),
    Column("comment", TEXT, "Optional keychain comment"),
    Column("created", TEXT, "Data item was created"),
    Column("modified", TEXT, "Date of last modification"),
    Column("type", TEXT, "Keychain item type (class)"),
    Column("path", TEXT, "Path to keychain containing item",
      additional=True),
])
implementation("keychain_items@genKeychainItems")
Add keychain_items to include basic item details 2015-03-08 09:59:59 +00:00			`table_name("keychain_items")`
			`description("Generic details about keychain items")`
			`schema([`
			`Column("label", TEXT, "Generic item name"),`
			`Column("description", TEXT, "Optional item description"),`
			`Column("comment", TEXT, "Optional keychain comment"),`
			`Column("created", TEXT, "Data item was created"),`
			`Column("modified", TEXT, "Date of last modification"),`
			`Column("type", TEXT, "Keychain item type (class)"),`
Use SQLite 3.14.0 to support LIKE and EQUALS (#2137) This commit bumps the third-party SQLite to the 3.14.0 pre-release (18:59). With 3.14.0 the LIKE and EQUALS constraint operators may be mixed within a query. Previously these would fail to produce a valid set. As part of the support, each virtual table should choose to bypass rowid-based deduplication using the new "WITHOUT ROWID" create table epilog. This will be appended to the schema if the table defines a PRIMARY KEY using index=True. 2016-06-06 16:36:53 +00:00			`Column("path", TEXT, "Path to keychain containing item",`
			`additional=True),`
Add keychain_items to include basic item details 2015-03-08 09:59:59 +00:00			`])`
			`implementation("keychain_items@genKeychainItems")`