fleet/schema/tables/pci_devices.yml
Eric 02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00

31 lines
No EOL
817 B
YAML

name: pci_devices
columns:
- name: pci_class_id
platforms:
- linux
- name: pci_subclass_id
platforms:
- linux
- name: pci_subclass
platforms:
- linux
- name: subsystem_vendor_id
platforms:
- linux
- name: subsystem_vendor
platforms:
- linux
- name: subsystem_model_id
platforms:
- linux
- name: subsystem_model
platforms:
- linux
examples: |-
This table allows you to list PCI devices. With this query, identify devices with a specific model
ID. This can be useful when trying to identify systems that use common hardware, for example, when
trying to target firmware updates or understand similarities between problematic systems.
```
SELECT driver, model, vendor, vendor_id FROM pci_devices WHERE model_id='0x1001';
```