osquery-1/specs
2016-01-05 18:48:34 -08:00
..
centos Table results caching 2015-11-14 15:57:23 -08:00
darwin Use key_strength to support ECC 2016-01-05 18:48:34 -08:00
linux Add user_events table based on audit user-type messages 2015-11-23 18:13:31 -08:00
ubuntu Table results caching 2015-11-14 15:57:23 -08:00
utility Preserve atime and mtime by default for readFile 2015-12-11 22:18:45 -08:00
acpi_tables.table Move specs to a top-level path, add query examples 2015-06-03 10:39:05 -07:00
arp_cache.table Move specs to a top-level path, add query examples 2015-06-03 10:39:05 -07:00
authorized_keys.table [#1665, #1615] Refactor user-based tables to act uniformly 2015-11-24 12:46:25 -08:00
blacklist TSK integration and example tables 2015-12-04 11:08:51 -08:00
block_devices.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
chrome_extensions.table [#1665, #1615] Refactor user-based tables to act uniformly 2015-11-24 12:46:25 -08:00
cpuid.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
crontab.table Table results caching 2015-11-14 15:57:23 -08:00
device_file.table TSK integration and example tables 2015-12-04 11:08:51 -08:00
device_hash.table Additional TSK tables 2015-12-07 08:36:22 -08:00
device_partitions.table TSK integration and example tables 2015-12-04 11:08:51 -08:00
disk_encryption.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
etc_hosts.table Table results caching 2015-11-14 15:57:23 -08:00
etc_protocols.table Table results caching 2015-11-14 15:57:23 -08:00
etc_services.table Table results caching 2015-11-14 15:57:23 -08:00
example.table Move specs to a top-level path, add query examples 2015-06-03 10:39:05 -07:00
file_events.table Preserve atime and mtime by default for readFile 2015-12-11 22:18:45 -08:00
firefox_addons.table [#1665, #1615] Refactor user-based tables to act uniformly 2015-11-24 12:46:25 -08:00
groups.table Move specs to a top-level path, add query examples 2015-06-03 10:39:05 -07:00
hardware_events.table Rewrite OS X hardware events to use IOKit proper 2015-11-21 19:31:05 -08:00
interface_addresses.table Table results caching 2015-11-14 15:57:23 -08:00
interface_details.table Table results caching 2015-11-14 15:57:23 -08:00
kernel_info.table Table results caching 2015-11-14 15:57:23 -08:00
known_hosts.table [#1665, #1615] Refactor user-based tables to act uniformly 2015-11-24 12:46:25 -08:00
last.table Table results caching 2015-11-14 15:57:23 -08:00
listening_ports.table Table results caching 2015-11-14 15:57:23 -08:00
logged_in_users.table Table results caching 2015-11-14 15:57:23 -08:00
magic.table Adding magic table to check for libmagic data 2015-08-28 12:49:46 -07:00
mounts.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
opera_extensions.table [#1665, #1615] Refactor user-based tables to act uniformly 2015-11-24 12:46:25 -08:00
os_version.table Move specs to a top-level path, add query examples 2015-06-03 10:39:05 -07:00
pci_devices.table Rewrite OS X hardware events to use IOKit proper 2015-11-21 19:31:05 -08:00
platform_info.table Add platform_info table for UEFI/ROM details 2015-12-12 01:55:14 -08:00
process_envs.table Move specs to a top-level path, add query examples 2015-06-03 10:39:05 -07:00
process_events.table Add a Linux audit event publisher 2015-09-03 08:45:02 -07:00
process_memory_map.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
process_open_files.table Move specs to a top-level path, add query examples 2015-06-03 10:39:05 -07:00
process_open_sockets.table This refactors a bit of config/packs and adds a socket_events table to Linux. 2015-10-27 15:13:02 -07:00
processes.table Add saved UIDs and GIDs to process table 2015-11-18 16:44:07 -08:00
routes.table Table results caching 2015-11-14 15:57:23 -08:00
shell_history.table [#1665, #1615] Refactor user-based tables to act uniformly 2015-11-24 12:46:25 -08:00
smbios_tables.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
suid_bin.table Table results caching 2015-11-14 15:57:23 -08:00
system_controls.table Table results caching 2015-11-14 15:57:23 -08:00
system_info.table [#1546] Add computer_name to system_info and extend to Linux 2015-11-04 10:31:16 -08:00
uptime.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
usb_devices.table Rewrite OS X hardware events to use IOKit proper 2015-11-21 19:31:05 -08:00
user_groups.table Move specs to a top-level path, add query examples 2015-06-03 10:39:05 -07:00
users.table Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
yara_events.table Add tags and strings columns to YARA tables. 2015-07-27 08:20:24 -04:00
yara.table Add tags and strings columns to YARA tables. 2015-07-27 08:20:24 -04:00