mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 10:23:54 +00:00
a105924804
1. Example queries will run with an (optional) integration test. 2. Fix bad accesses with OS X package BOMs 3. Move spec files from ./osquery/tables/specs to ./specs 4. Remove server parsers (netlib) from client builds.
32 lines
1.6 KiB
Plaintext
32 lines
1.6 KiB
Plaintext
table_name("apps")
|
|
description("OS X applications installed in known search paths (e.g., /Applications).")
|
|
schema([
|
|
Column("name", TEXT, "Name of the Name.app folder"),
|
|
Column("path", TEXT, "Absolute and full Name.app path"),
|
|
Column("bundle_executable", TEXT,
|
|
"Info properties CFBundleExecutable label"),
|
|
Column("bundle_identifier", TEXT,
|
|
"Info properties CFBundleIdentifier label"),
|
|
Column("bundle_name", TEXT, "Info properties CFBundleName label"),
|
|
Column("bundle_short_version", TEXT,
|
|
"Info properties CFBundleShortVersionString label"),
|
|
Column("bundle_version", TEXT, "Info properties CFBundleVersion label"),
|
|
Column("bundle_package_type", TEXT,
|
|
"Info properties CFBundlePackageType label"),
|
|
Column("environment", TEXT, "Application-set environment variables"),
|
|
Column("element", TEXT, "Does the app identify as a background agent"),
|
|
Column("compiler", TEXT, "Info properties DTCompiler label"),
|
|
Column("development_region", TEXT,
|
|
"Info properties CFBundleDevelopmentRegion label"),
|
|
Column("display_name", TEXT, "Info properties CFBundleDisplayName label"),
|
|
Column("info_string", TEXT, "Info properties CFBundleGetInfoString label"),
|
|
Column("minimum_system_version", TEXT,
|
|
"Minimum version of OS X required for the app to run"),
|
|
Column("category", TEXT,
|
|
"The UTI that categorizes the app for the App Store"),
|
|
Column("applescript_enabled", TEXT,
|
|
"Info properties NSAppleScriptEnabled label"),
|
|
Column("copyright", TEXT, "Info properties NSHumanReadableCopyright label"),
|
|
])
|
|
implementation("apps@genApps")
|