osquery-1/specs/darwin/iokit_devicetree.table
Teddy Reed a105924804 Move specs to a top-level path, add query examples
1. Example queries will run with an (optional) integration test.
2. Fix bad accesses with OS X package BOMs
3. Move spec files from ./osquery/tables/specs to ./specs
4. Remove server parsers (netlib) from client builds.
2015-06-03 10:39:05 -07:00

15 lines
743 B
Plaintext

table_name("iokit_devicetree")
description("The IOKit registry matching the DeviceTree plane.")
schema([
Column("name", TEXT, "Device node name"),
Column("class", TEXT, "Best matching device class (most-specific category)"),
Column("id", BIGINT, "IOKit internal registry ID"),
Column("parent", BIGINT, "Parent device registry ID"),
Column("device_path", TEXT, "Device tree path"),
Column("service", INTEGER, "1 if the device conforms to IOService else 0"),
Column("busy_state", INTEGER, "1 if the device is in a busy state else 0"),
Column("retain_count", INTEGER, "The device reference count"),
Column("depth", INTEGER, "Device nested depth"),
])
implementation("system/iokit_registry@genIOKitDeviceTree")