mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-06 09:35:20 +00:00
13 lines
492 B
Plaintext
13 lines
492 B
Plaintext
table_name("xprotect_reports")
|
|
description("Database of XProtect matches (if user generated/sent an XProtect report).")
|
|
schema([
|
|
Column("name", TEXT, "Description of XProtected malware"),
|
|
Column("user_action", TEXT, "Action taken by user after prompted"),
|
|
Column("time", TEXT, "Quarantine alert time"),
|
|
])
|
|
implementation("xprotect@genXProtectReports")
|
|
fuzz_paths([
|
|
"/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/",
|
|
"/Library/Logs/DiagnosticReports",
|
|
])
|