osquery-defense-kit/incident_response/etc_hosts.sql
Thomas Stromberg e785c35614
v0.0.1
2022-10-13 09:11:17 -04:00

9 lines
277 B
SQL

-- Retrieves all the entries in the target system /etc/hosts file.
--
-- interval: 86400
-- platform: posix
-- value: Identify network communications that are being redirected. Example: identify if security logging has been disabled
-- version: 1.4.5
select * from etc_hosts;