osquery-defense-kit/incident_response/process_memory_map.sql

8 lines
117 B
SQL

-- Retrieves the memory map per process
-- platform: posix
-- tags: postmortem
SELECT
*
FROM
process_memory_map;