mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2025-02-19 19:26:55 +00:00
17 lines
248 B
SQL
17 lines
248 B
SQL
-- Retrieves the memory map per process
|
|
-- platform: posix
|
|
-- tags: postmortem
|
|
SELECT pid,
|
|
permissions,
|
|
offset,
|
|
inode,
|
|
path,
|
|
pseudo
|
|
FROM process_memory_map
|
|
WHERE path != ""
|
|
GROUP BY pid,
|
|
permissions,
|
|
offset,
|
|
inode,
|
|
path,
|
|
pseudo; |