fleet/schema/tables/processes.yml

name: processes
examples: |-
  List executables listening on network ports.

  ```
  SELECT l.port, l.pid, p.name, p.path FROM listening_ports l JOIN processes p USING (pid); 
  ```
columns:
  - name: elevated_token
    platforms:
      - windows
  - name: secure_process
    platforms:
      - windows
  - name: protection_type
    platforms:
      - windows
  - name: virtual_process
    platforms:
      - windows
  - name: elapsed_time
    platforms:
      - windows
  - name: handle_count
    platforms:
      - windows
  - name: percent_processor_time
    platforms:
      - windows
  - name: upid
    platforms:
      - darwin
  - name: uppid
    platforms:
      - darwin
  - name: cpu_type
    platforms:
      - darwin
  - name: cpu_subtype
    platforms:
      - darwin
  - name: translated
    platforms:
      - darwin
Add Fleet override schema files (#8278) * create schema/tables, add yaml schema tables * Update osquery-table-details.ejs * Generate schema from schema/tables/ folder * Create generate-yaml-tables-from-json.js * update created table files * update fleet override validation * update error messages, add fleetRepoUrl * Delete generate-yaml-tables-from-json.js * Update osquery-table-details.ejs * Update whitespace in table examples * Revert "Update osquery-table-details.ejs" This reverts commit 2e9d63208f59997d492375ebaf1d0ec7e4afe468. * add YAML tables generated from updated Fleet schema * lint fixes * update arp_cache and docker_containers tables 2022-10-18 19:13:42 +00:00			`name: processes`
Schema: change default block scalar used in schema override files (#19296) Closes: #19271 Closes: #19286 Changes: - Updated the example in the schema folder readme - Updated the block scalar used in Fleet's osquery override documentation (`>-` » `\|-`) and removed extra newlines - Updated the block scalar used in URLs used to create new yaml override files - Regenerated osqeury_fleet_schema.json 2024-05-27 23:18:56 +00:00			`examples: \|-`
Add Fleet override schema files (#8278) * create schema/tables, add yaml schema tables * Update osquery-table-details.ejs * Generate schema from schema/tables/ folder * Create generate-yaml-tables-from-json.js * update created table files * update fleet override validation * update error messages, add fleetRepoUrl * Delete generate-yaml-tables-from-json.js * Update osquery-table-details.ejs * Update whitespace in table examples * Revert "Update osquery-table-details.ejs" This reverts commit 2e9d63208f59997d492375ebaf1d0ec7e4afe468. * add YAML tables generated from updated Fleet schema * lint fixes * update arp_cache and docker_containers tables 2022-10-18 19:13:42 +00:00			`List executables listening on network ports.`

			```
			`SELECT l.port, l.pid, p.name, p.path FROM listening_ports l JOIN processes p USING (pid);`
			```
			`columns:`
			`- name: elevated_token`
			`platforms:`
			`- windows`
			`- name: secure_process`
			`platforms:`
			`- windows`
			`- name: protection_type`
			`platforms:`
			`- windows`
			`- name: virtual_process`
			`platforms:`
			`- windows`
			`- name: elapsed_time`
			`platforms:`
			`- windows`
			`- name: handle_count`
			`platforms:`
			`- windows`
			`- name: percent_processor_time`
			`platforms:`
			`- windows`
			`- name: upid`
			`platforms:`
			`- darwin`
			`- name: uppid`
			`platforms:`
			`- darwin`
			`- name: cpu_type`
			`platforms:`
			`- darwin`
			`- name: cpu_subtype`
			`platforms:`
			`- darwin`
			`- name: translated`
			`platforms:`
			`- darwin`