mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2024-12-13 09:34:34 +00:00
8 lines
191 B
MySQL
8 lines
191 B
MySQL
|
SELECT pop.pid,
|
||
|
|
p.path,
|
||
|
|
p.cmdline
|
||
|
|
FROM process_open_sockets pop
|
||
|
|
JOIN processes p ON pop.pid = p.pid
|
||
|
|
WHERE family = 2 -- PF_INET
|
||
|
|
AND protocol = 1 -- ICMP
|
||
|
|
AND p.name NOT IN ('ping')
|