mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2025-01-29 00:32:44 +00:00
11 lines
169 B
SQL
11 lines
169 B
SQL
-- Return the list of socket events
|
|
--
|
|
-- tags: postmortem
|
|
-- platform: posix
|
|
-- interval: 600
|
|
SELECT
|
|
*
|
|
FROM
|
|
socket_events
|
|
WHERE time > (strftime('%s', 'now') -600)
|