osquery-defense-kit/incident_response/process_env.sql

8 lines
148 B
SQL

-- Retrieves all the environment variables per process in the target system.
-- tags: postmortem
-- platform: posix
SELECT
*
FROM
process_envs;