mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2025-02-16 09:27:06 +00:00
10 lines
210 B
SQL
10 lines
210 B
SQL
-- Retrieves all the currently installed authorized keys on a system
|
|
--
|
|
-- tags: postmortem
|
|
-- platform: posix
|
|
SELECT
|
|
authorized_keys.*
|
|
FROM
|
|
users
|
|
JOIN authorized_keys ON users.uid = authorized_keys.uid;
|