osquery-defense-kit/incident_response/ssh_configs.sql

9 lines
117 B
SQL

-- Retrieves the ssh configs per user
--
-- tags: postmortem
SELECT
*
FROM
users
JOIN ssh_configs USING (uid);