Summary:
Continuing to march toward low-overhead, type-safe table rows, this commit introduces
a distinction between rows being returned from a table (`TableRows`) and as the
result of a query (`QueryData`). Right now the two are simply aliases for each other;
that will change shortly.
(Adapted from https://github.com/facebook/osquery/pull/5198)
Reviewed By: guliashvili
Differential Revision: D13438019
fbshipit-source-id: 6563fc8c372d9d6c4b05705943ddf39b42260feb
Summary:
This is a manual port of https://github.com/facebook/osquery/pull/5216 to the new build system.
This table allows you to fetch a list of running applications on OSX. Contains PID, Bundle ID and whether or not the application is in focus. (The latter can be used to figure out what application was being used at a given moment.)
Reviewed By: guliashvili
Differential Revision: D13422150
fbshipit-source-id: 236b28d9140a9a9062fb913815d0c9f1da21c8b5
Summary: also type could be [remote] as well
Reviewed By: guliashvili
Differential Revision: D13398132
fbshipit-source-id: 3cc56b612ff9984f20ad74e1a0a9d356e97b8967
Summary:
- column patch could be empty on windows
- install_date was misstyped
Reviewed By: guliashvili
Differential Revision: D13398136
fbshipit-source-id: bf0b2fa1ecc7e51312eaa3a8d3ba42f70be6749b
Summary: mac address can be incomplete, lets add it in the verifier.
Reviewed By: fmanco
Differential Revision: D13377450
fbshipit-source-id: 057549d058f292fac7969adb242da2e313922c53
