osquery-defense-kit/incident_response/etc_hosts.sql

9 lines
138 B
SQL

-- Retrieves all the entries in the target system /etc/hosts file.
--
-- tags: postmortem
-- platform: posix
SELECT
*
FROM
etc_hosts;