osquery-defense-kit/incident_response/file_events.sql
Thomas Stromberg 41d83350a1
make reformat
2023-05-08 13:20:47 -04:00

9 lines
136 B
SQL

-- Return the list of watched file events (must be configured)
--
-- tags: postmortem
-- platform: posix
SELECT
*
FROM
file_events;