osquery-defense-kit/incident_response/startup_items.sql

-- Retrieve most programs that are part of a systems startup (multi-platform)
--
-- tags: postmortem
SELECT
  *
FROM
  startup_items;
Finish out the incident_response refactor 2022-10-19 20:19:53 +00:00			`-- Retrieve most programs that are part of a systems startup (multi-platform)`
v0.0.1 2022-10-13 13:11:17 +00:00			`--`
Finish out the incident_response refactor 2022-10-19 20:19:53 +00:00			`-- tags: postmortem`
			`SELECT`
Apply 'npx sql-formatter -l sqlite' 2022-10-17 23:06:17 +00:00			`*`
Finish out the incident_response refactor 2022-10-19 20:19:53 +00:00			`FROM`
Apply 'npx sql-formatter -l sqlite' 2022-10-17 23:06:17 +00:00			`startup_items;`