osquery-defense-kit/policy/unusually-long-uptime-likel...

16 lines
330 B
MySQL
Raw Normal View History

2022-11-23 12:10:41 +00:00
-- Indicative of a machine that probably needs a reboot for operating-system patches
2023-01-13 18:47:33 +00:00
--
-- tags: persistent state
-- platform: posix
2022-11-23 12:10:41 +00:00
SELECT
os_version.name AS os_name,
os_version.version AS os_version,
kernel_info.version AS kernel,
days AS uptime_days
FROM
kernel_info,
os_version,
uptime
WHERE
uptime.days > 60;