osquery-1/specs/windows/shared_resources.table
2017-05-25 12:43:58 -07:00

16 lines
1.3 KiB
Plaintext

table_name("shared_resources")
description("Displays shared resources on a computer system running Windows. This may be a disk drive, printer, interprocess communication, or other sharable device.")
schema([
Column("description", TEXT, "A textual description of the object"),
Column("install_date", TEXT, "Indicates when the object was installed. Lack of a value does not indicate that the object is not installed."),
Column("status", TEXT, "String that indicates the current status of the object."),
Column("allow_maximum", INTEGER, "Number of concurrent users for this resource has been limited. If True, the value in the MaximumAllowed property is ignored."),
Column("maximum_allowed", INTEGER, "Limit on the maximum number of users allowed to use this resource concurrently. The value is only valid if the AllowMaximum property is set to FALSE."),
Column("name", TEXT, "Alias given to a path set up as a share on a computer system running Windows."),
Column("path", TEXT, "Local path of the Windows share."),
Column("type", INTEGER, "Type of resource being shared. Types include: disk drives, print queues, interprocess communications (IPC), and general devices."),
])
implementation("shared_resources@genShares")
examples([
"select * from shared_resources",
])