osquery-defense-kit/incident_response/process_env.sql

-- Retrieves all the environment variables per process in the target system.
-- tags: postmortem
-- platform: posix
SELECT
  *
FROM
  process_envs;