osquery-1/specs/logged_in_users.table

13 lines
453 B
Plaintext

table_name("logged_in_users")
description("Users with an active shell on the system.")
schema([
Column("type", TEXT, "Login type"),
Column("user", TEXT, "User login name"),
Column("tty", TEXT, "Device name"),
Column("host", TEXT, "Remote hostname"),
Column("time", INTEGER, "Time entry was made"),
Column("pid", INTEGER, "Process (or thread) ID"),
])
attributes(cacheable=True)
implementation("logged_in_users@genLoggedInUsers")