mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 01:55:20 +00:00
a105924804
1. Example queries will run with an (optional) integration test. 2. Fix bad accesses with OS X package BOMs 3. Move spec files from ./osquery/tables/specs to ./specs 4. Remove server parsers (netlib) from client builds.
15 lines
513 B
Plaintext
15 lines
513 B
Plaintext
table_name("process_envs")
|
|
description("A key/value table of environment variables for each process.")
|
|
schema([
|
|
Column("pid", INTEGER, "Process (or thread) ID", index=True),
|
|
Column("key", TEXT, "Environment variable name"),
|
|
Column("value", TEXT, "Environment variable value"),
|
|
])
|
|
implementation("system/processes@genProcessEnvs")
|
|
examples([
|
|
"select * from process_envs where pid = 1",
|
|
'''select pe.*
|
|
from process_envs pe, (select * from processes limit 10) p
|
|
where p.pid = pe.pid;'''
|
|
])
|