mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 13:37:30 +00:00
02437a098e
Closes: #19271 Closes: #19286 Changes: - Updated the example in the schema folder readme - Updated the block scalar used in Fleet's osquery override documentation (`>-` » `|-`) and removed extra newlines - Updated the block scalar used in URLs used to create new yaml override files - Regenerated osqeury_fleet_schema.json
8 lines
332 B
YAML
8 lines
332 B
YAML
name: process_open_files
|
|
examples: |-
|
|
See what processes have which files open, for example, what processes are
|
|
currently interacting with files with 1Password in their name?
|
|
|
|
```
|
|
SELECT f.path file_path, p.path process_path FROM process_open_files f JOIN processes p ON p.pid = f.pid WHERE f.path LIKE '%1Password%';
|
|
```
|