mirror of
https://github.com/fleetdm/fleet
synced 2026-05-23 00:49:03 +00:00
11 lines
334 B
YAML
11 lines
334 B
YAML
|
name: process_open_files
|
||
|
|
examples: >-
|
||
|
|
See what processes have which files open, for example, what processes are
|
||
|
|
currently interacting with files with 1Password in their name?
|
||
|
|
|
||
|
|
```
|
||
|
|
|
||
|
|
SELECT f.path file_path, p.path process_path FROM process_open_files f JOIN processes p ON p.pid = f.pid WHERE f.path LIKE '%1Password%';
|
||
|
|
|
||
|
|
```
|