osquery-defense-kit/incident_response/chrome_extension_content_sc...

9 lines
270 B
MySQL
Raw Normal View History

2023-02-23 14:35:38 +00:00
-- Retrieves chrome extension cotent scripts that execute on a broad set of URLs.
-- tags: postmortem
-- platform: posix
2023-05-08 17:20:47 +00:00
SELECT
chrome_extension_content_scripts.*
FROM
users
JOIN chrome_extension_content_scripts ON users.uid = chrome_extension_content_scripts.uid