mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 02:18:53 +00:00
d4a3fe2452
Preparation for Windows Tables. We need a Windows process table so that the daemon will run
12 lines
411 B
Plaintext
12 lines
411 B
Plaintext
table_name("process_open_files")
|
|
description("File descriptors for each process.")
|
|
schema([
|
|
Column("pid", BIGINT, "Process (or thread) ID", index=True),
|
|
Column("fd", BIGINT, "Process-specific file descriptor number"),
|
|
Column("path", TEXT, "Filesystem path of descriptor"),
|
|
])
|
|
implementation("system/process_open_files@genOpenFiles")
|
|
examples([
|
|
"select * from process_open_files where pid = 1",
|
|
])
|