fleet/schema/tables/hash.yml
Eric 02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00

15 lines
362 B
YAML

name: hash
examples: |-
List zip files in the downloads folder as well as their associated sha256
hash.
```
SELECT f.path, h.sha256 FROM file f JOIN hash h ON f.path = h.path WHERE f.path LIKE '/Users/%/Downloads/%%.zip';
```
columns:
- name: pid_with_namespace
platforms:
- linux
- name: mount_namespace_id
platforms:
- linux