mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 02:18:53 +00:00
21 lines
674 B
Plaintext
21 lines
674 B
Plaintext
table_name("processes")
|
|
schema([
|
|
Column("name", TEXT, "The process path or shorthand argv[0]"),
|
|
Column("path", TEXT),
|
|
Column("cmdline", TEXT, "Complete argv"),
|
|
Column("pid", INTEGER),
|
|
Column("uid", BIGINT),
|
|
Column("gid", BIGINT),
|
|
Column("euid", BIGINT),
|
|
Column("egid", BIGINT),
|
|
Column("on_disk", TEXT, "The process path exist yes=1, no=-1"),
|
|
Column("wired_size", INTEGER),
|
|
Column("resident_size", INTEGER),
|
|
Column("phys_footprint", INTEGER),
|
|
Column("user_time", INTEGER),
|
|
Column("system_time", INTEGER),
|
|
Column("start_time", TEXT),
|
|
Column("parent", INTEGER),
|
|
])
|
|
implementation("system/processes@genProcesses")
|