mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 01:55:20 +00:00
a105924804
1. Example queries will run with an (optional) integration test. 2. Fix bad accesses with OS X package BOMs 3. Move spec files from ./osquery/tables/specs to ./specs 4. Remove server parsers (netlib) from client builds.
16 lines
609 B
Plaintext
16 lines
609 B
Plaintext
table_name("hash")
|
|
description("Filesystem hash data.")
|
|
schema([
|
|
Column("path", TEXT, "Must provide a path or directory", required=True),
|
|
Column("directory", TEXT, "Must provide a path or directory", required=True),
|
|
Column("md5", TEXT, "MD5 hash of provided filesystem data"),
|
|
Column("sha1", TEXT, "SHA1 hash of provided filesystem data"),
|
|
Column("sha256", TEXT, "SHA256 hash of provided filesystem data"),
|
|
])
|
|
attributes(utility=True)
|
|
implementation("utility/hash@genHash")
|
|
examples([
|
|
"select * from hash where path = '/etc/passwd'",
|
|
"select * from hash where directory = '/etc/'",
|
|
])
|