fleet/tools/osquery-testing/queries.txt

7 lines
269 B
Text
Raw Normal View History

# Each line should contain a single query with no LIMIT clause and no semicolon.
# LIMIT 3 will be automatically added by the script.
processes: select * from processes
users: select * from users
user_ssh_keys: select * from users cross join user_ssh_keys using (uid)