mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 02:18:53 +00:00
21 lines
640 B
Plaintext
21 lines
640 B
Plaintext
table_name("elf_symbols")
|
|
description("ELF symbol list.")
|
|
schema([
|
|
Column("name", TEXT, "Symbol name"),
|
|
Column("addr", INTEGER, "Symbol address (value)"),
|
|
Column("size", INTEGER, "Size of object"),
|
|
Column("type", TEXT, "Symbol type"),
|
|
Column("binding", TEXT, "Binding type"),
|
|
Column("offset", INTEGER, "Section table index"),
|
|
Column("table", TEXT, "Table name containing symbol"),
|
|
Column("path", TEXT, "Path to ELF file", required=True, index=True),
|
|
])
|
|
|
|
implementation("elf_info@getELFSymbols")
|
|
examples([
|
|
"select * from elf_symbols where path = '/usr/bin/grep'",
|
|
])
|
|
fuzz_paths([
|
|
"/usr/bin/grep",
|
|
])
|