osquery-1/specs/darwin/signature.table
2016-02-21 16:02:58 -08:00

12 lines
448 B
Plaintext

table_name("signature")
description("File (executable, bundle, installer, disk) code signing status.")
schema([
Column("path", TEXT, "Must provide a path or directory", required=True),
Column("signed", INTEGER, "1 If the file is signed else 0"),
Column("identifier", TEXT, "The signing identifier sealed into the signature"),
])
implementation("signature@genSignature")
examples([
"select * from signature where path = '/bin/ls'",
])