osquery-defense-kit/incident_response/es_process_events.sql
Thomas Stromberg 41d83350a1
make reformat
2023-05-08 13:20:47 -04:00

8 lines
125 B
SQL

-- Dump a list of process execution events from EndpointSecurity
--
-- platform: darwin
SELECT
*
FROM
es_process_events;