mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 09:58:54 +00:00
11 lines
539 B
Plaintext
11 lines
539 B
Plaintext
table_name("extended_attributes")
|
|
description("Returns the extended attributes for files (similar to Windows ADS).")
|
|
schema([
|
|
Column("path", TEXT, "Absolute file path", required=True),
|
|
Column("directory", TEXT, "Directory of file(s)", required=True),
|
|
Column("key", TEXT, "Name of the value generated from the extended attribute"),
|
|
Column("value", TEXT, "The parsed information from the attribute"),
|
|
Column("base64", INTEGER, "1 if the value is base64 encoded else 0"),
|
|
])
|
|
implementation("extended_attributes@genXattr")
|