diff --git a/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml b/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml index b06e54ffe5..d1f40911a6 100644 --- a/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml +++ b/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml @@ -1045,3 +1045,25 @@ spec: purpose: Informational tags: crowdstrike, plist, network, content filter contributors: zwass +--- +apiVersion: v1 +kind: query +spec: + name: Get a list of Visual Studio Code extensions + platform: darwin + description: Get a list of installed VS Code extensions. + query: | + SELECT split(user_path, '/', 1) as username, + json_extract(value, '$.identifier.id') as id, + json_extract(value, '$.identifier.uuid') as uuid, + json_extract(value, '$.location.path') as path, + json_extract(value, '$.version') as version, + json_extract(value, '$.metadata.publisherDisplayName') as publisher_display_name + FROM ( + SELECT file_lines.path as user_path, value + FROM file_lines, json_each(line) + WHERE file_lines.path LIKE '/Users/%/.vscode/extensions/extensions.json' + ); + purpose: Informational + tags: inventory + contributors: lucasmrod,sharon-fdm,zwass \ No newline at end of file