fleet/schema/tables/firefox_addons.yml
Rachael Shaw 55df14a23e
Update schema overrides to clarify which tables require joining against users (#18045)
For #16784.

These tables require joining against `users`:
+ `chrome_extension_content_scripts`
+ `chrome_extensions`
+ `firefox_addons`
+ `vscode_extensions`
+ `browser_plugins`
+ `crashes`
+ `preferences`
+ `safari_extensions`
+ `ssh_configs`
+ `user_ssh_keys`
+ `authorized_keys`
+ `known_hosts`
+ `shell_history`

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-05 11:11:18 -05:00

20 lines
667 B
YAML

name: firefox_addons
description: Firefox browser [add-ons](https://addons.mozilla.org/en-US/firefox/) (plugins).
examples: >-
```
SELECT * FROM users CROSS JOIN firefox_addons USING (uid);
```
See Firefox extensions by user as well as information about their creator and
automatic update status.
```
SELECT u.username, f.identifier, f.creator, f.description, f.version, f.autoupdate FROM users u CROSS JOIN firefox_addons f USING (uid) WHERE f.active='1';
```
notes: Querying this table requires joining against the `users` table. [Learn more](https://fleetdm.com/guides/osquery-consider-joining-against-the-users-table)
columns:
- name: uid