mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2024-12-18 03:54:30 +00:00
12 lines
184 B
SQL
12 lines
184 B
SQL
-- Return the list of socket events
|
|
--
|
|
-- tags: postmortem events extra
|
|
-- platform: posix
|
|
-- interval: 600
|
|
SELECT
|
|
*
|
|
FROM
|
|
socket_events
|
|
WHERE
|
|
time > (strftime('%s', 'now') -600)
|