osquery-defense-kit/incident_response/mounts.sql

-- Retrieves the current list of mounted drives in the target system.
--
-- tags: postmortem
-- platform: posix
SELECT
  *
FROM
  mounts;
v0.0.1 2022-10-13 13:11:17 +00:00			`-- Retrieves the current list of mounted drives in the target system.`
			`--`
Finish out the incident_response refactor 2022-10-19 20:19:53 +00:00			`-- tags: postmortem`
v0.0.1 2022-10-13 13:11:17 +00:00			`-- platform: posix`
Finish out the incident_response refactor 2022-10-19 20:19:53 +00:00			`SELECT`
Apply 'npx sql-formatter -l sqlite' 2022-10-17 23:06:17 +00:00			`*`
Finish out the incident_response refactor 2022-10-19 20:19:53 +00:00			`FROM`
Apply 'npx sql-formatter -l sqlite' 2022-10-17 23:06:17 +00:00			`mounts;`