mirror of
https://github.com/fleetdm/fleet
synced 2026-05-23 08:58:41 +00:00
e82962e4a7
* create schema/tables, add yaml schema tables
* Update osquery-table-details.ejs
* Generate schema from schema/tables/ folder
* Create generate-yaml-tables-from-json.js
* update created table files
* update fleet override validation
* update error messages, add fleetRepoUrl
* Delete generate-yaml-tables-from-json.js
* Update osquery-table-details.ejs
* Update whitespace in table examples
* Revert "Update osquery-table-details.ejs"
This reverts commit 2e9d63208f.
* add YAML tables generated from updated Fleet schema
* lint fixes
* update arp_cache and docker_containers tables
11 lines
348 B
YAML
11 lines
348 B
YAML
name: curl_certificate
|
|
examples: >-
|
|
Identify the certificates being served to osquery clients. This can allow you
|
|
to detect machines that are behind a proxy or firewall attempting to decrypt
|
|
TLS, maliciously or not.
|
|
|
|
```
|
|
|
|
SELECT issuer_organization, signature, sha256_fingerprint FROM curl_certificate WHERE hostname='google.com';
|
|
|
|
```
|