mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 18:33:54 +00:00
a105924804
1. Example queries will run with an (optional) integration test. 2. Fix bad accesses with OS X package BOMs 3. Move spec files from ./osquery/tables/specs to ./specs 4. Remove server parsers (netlib) from client builds.
18 lines
1.0 KiB
Plaintext
18 lines
1.0 KiB
Plaintext
table_name("osquery_packs")
|
|
description("Information about the current query packs that are loaded in osquery.")
|
|
schema([
|
|
Column("name", TEXT, "The given name for this query pack"),
|
|
Column("path", TEXT, "Path where the pack configuration is found"),
|
|
Column("query_name", TEXT, "The given name for this query"),
|
|
Column("query", TEXT, "The exact query to run"),
|
|
Column("interval", INTEGER, "The interval in seconds to run this query, not an exact interval"),
|
|
Column("platform", TEXT, "Platforms this query is supported on"),
|
|
Column("version", TEXT, "Minimum osquery version that this query will run on"),
|
|
Column("description", TEXT, "Description of the data retrieved by this query"),
|
|
Column("value", TEXT, "Value of the data retrieved by this query"),
|
|
Column("scheduled", INTEGER, "Status if query is scheduled to run. If query is scheduled 1, else 0"),
|
|
Column("scheduled_name", TEXT, "Name of the query in the scheduled table")
|
|
])
|
|
attributes(utility=True)
|
|
implementation("osquery@genOsqueryPacks")
|