mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 01:55:20 +00:00
13 lines
453 B
Plaintext
13 lines
453 B
Plaintext
table_name("office_mru")
|
|
description("View recently opened Office documents.")
|
|
schema([
|
|
Column("application", TEXT, "Associated Office application"),
|
|
Column("version", TEXT, "Office application version number"),
|
|
Column("path", TEXT, "File path"),
|
|
Column("last_opened_time", INTEGER, "Most recent opened time file was opened"),
|
|
Column("sid", TEXT, "User SID"),
|
|
])
|
|
implementation("office_mru@genOfficeMru")
|
|
examples([
|
|
"select * from office_mru;",
|
|
]) |