valitydev/osquery-1
14
0
Fork 0
mirror of https://github.com/valitydev/osquery-1.git synced 2024-11-07 01:55:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
6d159d4046
osquery-1/specs/darwin
History
Jonathan Keljo 898ed37dfb Table for OSX Running and Active Applications 
Summary:
This is a manual port of https://github.com/facebook/osquery/pull/5216 to the new build system.

This table allows you to fetch a list of running applications on OSX. Contains PID, Bundle ID and whether or not the application is in focus. (The latter can be used to figure out what application was being used at a given moment.)

Reviewed By: guliashvili

Differential Revision: D13422150

fbshipit-source-id: 236b28d9140a9a9062fb913815d0c9f1da21c8b5
2018-12-12 09:17:19 -08:00
..
account_policy_data.table Add account_policy_data virtual table for macOS (#4165) 2018-03-09 09:02:47 -08:00
ad_config.table Add make fuzz (#2458) 2016-09-13 20:37:31 -07:00
alf_exceptions.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
alf_explicit_auths.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
alf_services.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
alf.table add documentation for alf global_state (#4247) 2018-05-16 22:43:37 -04:00
app_schemes.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
apps.table Add last_opened_time to apps table (#3715) 2017-09-21 19:18:35 -07:00
asl.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
authorization_mechanisms.table Introduce table options (#2101) 2016-05-18 12:23:52 -07:00
authorizations.table Add make fuzz (#2458) 2016-09-13 20:37:31 -07:00
battery.table Move build system to BUCK 2018-12-07 16:12:35 +00:00
browser_plugins.table fuzz: Use example queries as input to make fuzz (#3795) 2017-10-06 08:45:49 -07:00
crashes.table fuzz: Use example queries as input to make fuzz (#3795) 2017-10-06 08:45:49 -07:00
cups_destinations.table Cups Jobs and Cups Destinations (#4278) 2018-05-02 15:03:17 -07:00
cups_jobs.table Cups Jobs and Cups Destinations (#4278) 2018-05-02 15:03:17 -07:00
device_firmware.table tables: Add device_firmware to darwin (#3499) 2017-08-02 09:48:09 -07:00
disk_events.table darwin: Improve disk_events add detection (#3332) 2017-05-26 10:38:26 -07:00
event_taps.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
extended_attributes.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
fan_speed_sensors.table add fan name to fan speeds table 2016-03-03 19:44:53 -05:00
gatekeeper_approved_apps.table Darwin: Add gatekeeper tables (#3461) 2017-07-27 10:51:31 -07:00
gatekeeper.table Darwin: Add gatekeeper tables (#3461) 2017-07-27 10:51:31 -07:00
homebrew_packages.table Introduce table options (#2101) 2016-05-18 12:23:52 -07:00
iokit_devicetree.table Introduce table options (#2101) 2016-05-18 12:23:52 -07:00
iokit_registry.table Introduce table options (#2101) 2016-05-18 12:23:52 -07:00
kernel_extensions.table Use SQLite 3.14.0 to support LIKE and EQUALS (#2137) 2016-06-06 09:36:53 -07:00
kernel_panics.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
keychain_acls.table Introduce table options (#2101) 2016-05-18 12:23:52 -07:00
keychain_items.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
launchd_overrides.table Introduce table options (#2101) 2016-05-18 12:23:52 -07:00
launchd.table Add make fuzz (#2458) 2016-09-13 20:37:31 -07:00
managed_policies.table Add make fuzz (#2458) 2016-09-13 20:37:31 -07:00
mdfind.table Add an mdfind table to macOS (#4313) 2018-05-02 10:58:12 -07:00
nfs_shares.table Add make fuzz (#2458) 2016-09-13 20:37:31 -07:00
nvram.table Move specs to a top-level path, add query examples 2015-06-03 10:39:05 -07:00
package_bom.table Reduce several INFO logs to VLOGs and increase size-INTEGERs to BIGINT (#2559) 2016-09-28 12:38:35 -07:00
package_install_history.table Refactor install_history 2016-04-01 10:02:56 -07:00
package_receipts.table [Fix #2400] Use PackageKit to enumerate packages (#3685) 2017-09-12 21:59:55 -07:00
plist.table Separate preferences from plist and add user-concept (#3455) 2017-07-02 18:28:59 -07:00
power_sensors.table [Fix #1854] Unify power sensor tables 2016-02-21 16:02:58 -08:00
preferences.table fuzz: Use example queries as input to make fuzz (#3795) 2017-10-06 08:45:49 -07:00
quicklook_cache.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
running_apps.table Table for OSX Running and Active Applications 2018-12-12 09:17:19 -08:00
safari_extensions.table tables: Fix table metadata when constraints are used (#3151) 2017-04-12 21:48:28 -07:00
sandboxes.table Add make fuzz (#2458) 2016-09-13 20:37:31 -07:00
shared_folders.table tables: Implement shared folders table for Darwin (#3510) 2017-08-01 20:33:57 -07:00
sharing_preferences.table Adding content_caching to sharing_preferences (#4699) 2018-07-16 12:13:14 +01:00
signature.table Support CDHash algorithms other than SHA-1 (#4679) 2018-07-13 12:00:43 -07:00
sip_config.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
smc_keys.table Use SQLite 3.14.0 to support LIKE and EQUALS (#2137) 2016-06-06 09:36:53 -07:00
temperature_sensors.table Fix temperature sorting (#3308) 2017-05-23 09:15:34 -07:00
time_machine_backups.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
time_machine_destinations.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
user_interaction_events.table Renaming the key_events table to user_interaction_events and adding mouse down (#3951) 2017-11-21 23:43:52 -08:00
virtual_memory_info.table Virtual memory statistics for darwin (#3368) 2017-05-31 12:00:44 -07:00
wifi_networks.table Add make fuzz (#2458) 2016-09-13 20:37:31 -07:00
wifi_scan.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
wifi_status.table Make all descriptions use periods consistently. (#3324) 2017-05-25 12:43:58 -07:00
xprotect_entries.table Introduce table options (#2101) 2016-05-18 12:23:52 -07:00
xprotect_meta.table Introduce table options (#2101) 2016-05-18 12:23:52 -07:00
xprotect_reports.table Add make fuzz (#2458) 2016-09-13 20:37:31 -07:00