osquery-1/specs/darwin/package_install_history.table
2016-04-01 10:02:56 -07:00

12 lines
525 B
Plaintext

table_name("package_install_history")
description("OS X package install history.")
schema([
Column("package_id", TEXT, "Label packageIdentifiers"),
Column("time", INTEGER, "Label date as UNIX timestamp"),
Column("name", TEXT, "Package display name"),
Column("version", TEXT, "Package display version"),
Column("source", TEXT, "Install source: usually the installer process name"),
Column("content_type", TEXT, "Package content_type (optional)"),
])
implementation("packages@genPackageInstallHistory")