mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2025-01-29 00:32:44 +00:00
12 lines
202 B
SQL
12 lines
202 B
SQL
-- Returns a list of file information from /etc (non-hidden only)
|
|
--
|
|
-- tags: postmortem
|
|
-- platform: posix
|
|
SELECT
|
|
*
|
|
FROM
|
|
file
|
|
JOIN hash ON file.path = hash.path
|
|
WHERE
|
|
file.path LIKE "/etc/%%";
|