mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 10:23:54 +00:00
16 lines
541 B
Plaintext
16 lines
541 B
Plaintext
table_name("shell_history")
|
|
description("A line-delimited (command) table of per-user .*_history data.")
|
|
schema([
|
|
Column("uid", BIGINT, "Shell history owner", additional=True),
|
|
Column("time", INTEGER, "Entry timestamp"),
|
|
Column("command", TEXT, "Unparsed date/line/command history line"),
|
|
Column("history_file", TEXT, "Path to the .*_history for this user"),
|
|
ForeignKey(column="uid", table="users"),
|
|
])
|
|
attributes(user_data=True)
|
|
implementation("shell_history@genShellHistory")
|
|
fuzz_paths([
|
|
"/home",
|
|
"/Users",
|
|
])
|