osquery-1/osquery/tables/system
Pablo S. Torralba a6e04efdd7 Add quarantine vtable for OSX
The tables reports:
- path: The file in quarantine
- creator: The application that created the file

Example:
osquery> select * from quarantine limit 10;

+----------------------------------------------------------------------------+---------------+
| path                                                                       | creator       |
+----------------------------------------------------------------------------+---------------+
| /Applications/Adium.app                                                    | Google Chrome |
| /Applications/Adium.app/Contents                                           | Google Chrome |
| /Applications/Adium.app/Contents/_CodeSignature                            | Google Chrome |
| /Applications/Adium.app/Contents/_CodeSignature/CodeResources              | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks                                | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework                | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/Adium          | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/Headers        | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/PrivateHeaders | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/Resources      | Google Chrome |
+----------------------------------------------------------------------------+---------------+

Fixes issue #231
2014-10-31 06:10:51 -07:00
..
darwin Add quarantine vtable for OSX 2014-10-31 06:10:51 -07:00
linux Add process_envs table for OSX and Linux for issue #99 2014-10-29 03:45:26 -07:00
bash_history.cpp Using clang-format 3.5 2014-10-27 17:37:36 -07:00
cpuid.cpp [vtables] CPUID asm call feature information 2014-10-29 03:09:34 -07:00
last.cpp Adding support for last in linux 2014-10-13 18:19:08 -07:00
suid_bin.cpp Add suid_bin vtable 2014-10-29 01:33:58 -07:00