osquery-1/specs/darwin/keychain_items.table
Teddy Reed a105924804 Move specs to a top-level path, add query examples
1. Example queries will run with an (optional) integration test.
2. Fix bad accesses with OS X package BOMs
3. Move spec files from ./osquery/tables/specs to ./specs
4. Remove server parsers (netlib) from client builds.
2015-06-03 10:39:05 -07:00

13 lines
542 B
Plaintext

table_name("keychain_items")
description("Generic details about keychain items")
schema([
Column("label", TEXT, "Generic item name"),
Column("description", TEXT, "Optional item description"),
Column("comment", TEXT, "Optional keychain comment"),
Column("created", TEXT, "Data item was created"),
Column("modified", TEXT, "Date of last modification"),
Column("type", TEXT, "Keychain item type (class)"),
Column("path", TEXT, "Path to keychain containing item"),
])
implementation("keychain_items@genKeychainItems")