mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 09:58:54 +00:00
b28c4d8d0f
Table options includes a change to the Registry::call API for TablePlugins. When requesting route information or the 'columns' action, a new 'op' key is included.
33 lines
1.6 KiB
Plaintext
33 lines
1.6 KiB
Plaintext
table_name("apps")
|
|
description("OS X applications installed in known search paths (e.g., /Applications).")
|
|
schema([
|
|
Column("name", TEXT, "Name of the Name.app folder"),
|
|
Column("path", TEXT, "Absolute and full Name.app path"),
|
|
Column("bundle_executable", TEXT,
|
|
"Info properties CFBundleExecutable label"),
|
|
Column("bundle_identifier", TEXT,
|
|
"Info properties CFBundleIdentifier label"),
|
|
Column("bundle_name", TEXT, "Info properties CFBundleName label"),
|
|
Column("bundle_short_version", TEXT,
|
|
"Info properties CFBundleShortVersionString label"),
|
|
Column("bundle_version", TEXT, "Info properties CFBundleVersion label"),
|
|
Column("bundle_package_type", TEXT,
|
|
"Info properties CFBundlePackageType label"),
|
|
Column("environment", TEXT, "Application-set environment variables"),
|
|
Column("element", TEXT, "Does the app identify as a background agent"),
|
|
Column("compiler", TEXT, "Info properties DTCompiler label"),
|
|
Column("development_region", TEXT,
|
|
"Info properties CFBundleDevelopmentRegion label"),
|
|
Column("display_name", TEXT, "Info properties CFBundleDisplayName label"),
|
|
Column("info_string", TEXT, "Info properties CFBundleGetInfoString label"),
|
|
Column("minimum_system_version", TEXT,
|
|
"Minimum version of OS X required for the app to run"),
|
|
Column("category", TEXT,
|
|
"The UTI that categorizes the app for the App Store"),
|
|
Column("applescript_enabled", TEXT,
|
|
"Info properties NSAppleScriptEnabled label"),
|
|
Column("copyright", TEXT, "Info properties NSHumanReadableCopyright label"),
|
|
])
|
|
attributes(cacheable=True)
|
|
implementation("apps@genApps")
|