osquery-defense-kit/incident_response/app_schemes.sql
Thomas Stromberg e785c35614
v0.0.1
2022-10-13 09:11:17 -04:00

9 lines
249 B
SQL

-- Retrieves the list of application scheme/protocol-based IPC handlers.
--
-- interval: 86400
-- platform: darwin
-- value: Post-priori hijack detection, detect potential sensitive information leakage.
-- version: 1.4.7
select * from app_schemes;