mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 18:08:53 +00:00
a6e04efdd7
The tables reports: - path: The file in quarantine - creator: The application that created the file Example: osquery> select * from quarantine limit 10; +----------------------------------------------------------------------------+---------------+ | path | creator | +----------------------------------------------------------------------------+---------------+ | /Applications/Adium.app | Google Chrome | | /Applications/Adium.app/Contents | Google Chrome | | /Applications/Adium.app/Contents/_CodeSignature | Google Chrome | | /Applications/Adium.app/Contents/_CodeSignature/CodeResources | Google Chrome | | /Applications/Adium.app/Contents/Frameworks | Google Chrome | | /Applications/Adium.app/Contents/Frameworks/Adium.framework | Google Chrome | | /Applications/Adium.app/Contents/Frameworks/Adium.framework/Adium | Google Chrome | | /Applications/Adium.app/Contents/Frameworks/Adium.framework/Headers | Google Chrome | | /Applications/Adium.app/Contents/Frameworks/Adium.framework/PrivateHeaders | Google Chrome | | /Applications/Adium.app/Contents/Frameworks/Adium.framework/Resources | Google Chrome | +----------------------------------------------------------------------------+---------------+ Fixes issue #231 |
||
---|---|---|
.. | ||
darwin | ||
linux | ||
bash_history.cpp | ||
cpuid.cpp | ||
last.cpp | ||
suid_bin.cpp |