mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2025-02-17 18:07:10 +00:00
9 lines
216 B
MySQL
9 lines
216 B
MySQL
|
-- Return the list of open files by process
|
||
|
|
--
|
||
|
|
-- tags: postmortem
|
||
|
|
-- platform: posix
|
||
|
|
SELECT p.path AS p_path, p.name AS p_name,
|
||
|
|
pof.*
|
||
|
|
FROM process_open_files AS pof
|
||
|
|
LEFT JOIN processes p ON pof.pid = p.pid;
|