fleet/schema/tables/xprotect_meta.yml
Eric 02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00

15 lines
701 B
YAML

name: xprotect_meta
description: "This Mac's browser-related [XProtect](https://support.apple.com/en-ca/guide/security/sec469d47bd8/web) signatures."
columns:
- name: identifier
description: "Browser extension or plugin [identifier](https://fleetdm.com/tables/safari_extensions)"
- name: min_version
description: "The minimum allowed plugin version, or 'any' if no version is allowed."
examples: |-
See the minimum version of specific components allowed by Xprotect. This
usually means the previous versions have vulnerabilities that are being
exploited at scale, or were exploited at scale at some point in time.
```
SELECT * FROM xprotect_meta WHERE min_version!='any';
```