fleet/schema/tables/curl_certificate.yml
Eric 02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00

9 lines
346 B
YAML

name: curl_certificate
examples: |-
Identify the certificates being served to osquery clients. This can allow you
to detect machines that are behind a proxy or firewall attempting to decrypt
TLS, maliciously or not.
```
SELECT issuer_organization, signature, sha256_fingerprint FROM curl_certificate WHERE hostname='google.com';
```