mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-06 09:35:20 +00:00
b28c4d8d0f
Table options includes a change to the Registry::call API for TablePlugins. When requesting route information or the 'columns' action, a new 'op' key is included.
14 lines
629 B
Plaintext
14 lines
629 B
Plaintext
table_name("iokit_registry")
|
|
description("The full IOKit registry without selecting a plane.")
|
|
schema([
|
|
Column("name", TEXT, "Default name of the node"),
|
|
Column("class", TEXT, "Best matching device class (most-specific category)"),
|
|
Column("id", BIGINT, "IOKit internal registry ID"),
|
|
Column("parent", BIGINT, "Parent registry ID"),
|
|
Column("busy_state", INTEGER, "1 if the node is in a busy state else 0"),
|
|
Column("retain_count", INTEGER, "The node reference count"),
|
|
Column("depth", INTEGER, "Node nested depth"),
|
|
])
|
|
attributes(cacheable=True)
|
|
implementation("system/iokit_registry@genIOKitRegistry")
|