osquery-defense-kit/incident_response/known_hosts.sql
Thomas Stromberg 41d83350a1
make reformat
2023-05-08 13:20:47 -04:00

9 lines
193 B
SQL

-- Retrieves chrome extensions that execute on a broad set of URLs.
-- tags: postmortem
-- platform: posix
SELECT
known_hosts.*
FROM
users
JOIN known_hosts ON users.uid = known_hosts.uid