osquery-defense-kit/incident_response/mounts.sql

9 lines
138 B
MySQL
Raw Permalink Normal View History

2022-10-13 13:11:17 +00:00
-- Retrieves the current list of mounted drives in the target system.
--
-- tags: postmortem
2022-10-13 13:11:17 +00:00
-- platform: posix
SELECT
2022-10-17 23:06:17 +00:00
*
FROM
2022-10-17 23:06:17 +00:00
mounts;