Browse Rules

osquery: $(osquery.pack) query result

osquery: $(osquery.pack) query result

osquery: $(osquery.pack) $(osquery.subquery): NVRAM variable $(osquery.columns.name) value $(osquery.columns.value)

osquery: $(osquery.pack) $(osquery.subquery): NVRAM variable $(osquery.columns.name) value $(osquery.columns.value)

osquery: $(osquery.pack) $(osquery.subquery): EFI file $(osquery.columns.path) sha256 $(osquery.columns.sha256)

osquery: $(osquery.pack) $(osquery.subquery): EFI file $(osquery.columns.path) sha256 $(osquery.columns.sha256)

osquery: $(osquery.pack) $(osquery.subquery): ACPI table $(osquery.columns.name) size is $(osquery.columns.size)

osquery: $(osquery.pack) $(osquery.subquery): ACPI table $(osquery.columns.name) size is $(osquery.columns.size)

osquery: $(osquery.pack) $(osquery.subquery): CPU feature $(osquery.columns.feature) and value $(osquery.columns.value)

osquery: $(osquery.pack) $(osquery.subquery): CPU feature $(osquery.columns.feature) and value $(osquery.columns.value)

osquery: $(osquery.pack) $(osquery.subquery): ACPI table $(osquery.columns.name) size is $(osquery.columns.size)

osquery: $(osquery.pack) $(osquery.subquery): ACPI table $(osquery.columns.name) size is $(osquery.columns.size)

osquery: $(osquery.pack) $(osquery.subquery): Hardware device $(osquery.columns.model) triggered action $(osquery.columns.action)

osquery: $(osquery.pack) $(osquery.subquery): Hardware device $(osquery.columns.model) triggered action $(osquery.columns.action)

osquery: $(osquery.pack) $(osquery.subquery): System control $(osquery.columns.name) oid is $(osquery.columns.oid)

osquery: $(osquery.pack) $(osquery.subquery): System control $(osquery.columns.name) oid is $(osquery.columns.oid)

osquery: $(osquery.pack) $(osquery.subquery): Windows device $(osquery.columns.device_name) driver is being used

osquery: $(osquery.pack) $(osquery.subquery): Windows device $(osquery.columns.device_name) driver is being used

osquery: $(osquery.pack) $(osquery.subquery): Fan $(osquery.columns.name) actual speed is $(osquery.columns.actual) rpm

osquery: $(osquery.pack) $(osquery.subquery): Fan $(osquery.columns.name) actual speed is $(osquery.columns.actual) rpm

osquery: $(osquery.pack) $(osquery.subquery): Temperature sensor $(osquery.columns.name) is at $(osquery.columns.celsius) celsius

osquery: $(osquery.pack) $(osquery.subquery): Temperature sensor $(osquery.columns.name) is at $(osquery.columns.celsius) celsius

osquery: $(osquery.pack) $(osquery.subquery): PCI device $(osquery.columns.model) with vendor $(osquery.columns.vendor) is active

osquery: $(osquery.pack) $(osquery.subquery): PCI device $(osquery.columns.model) with vendor $(osquery.columns.vendor) is active

osquery: $(osquery.pack) $(osquery.subquery): IOKit device $(osquery.columns.name) busy state is $(osquery.columns.busy_state)

osquery: $(osquery.pack) $(osquery.subquery): IOKit device $(osquery.columns.name) busy state is $(osquery.columns.busy_state)

osquery: $(osquery.pack) $(osquery.subquery): OS X Kernel extension $(osquery.columns.name) with version $(osquery.columns.version) is loaded

osquery: $(osquery.pack) $(osquery.subquery): OS X Kernel extension $(osquery.columns.name) with version $(osquery.columns.version) is loaded

osquery: $(osquery.pack) $(osquery.subquery): USB device from vendor $(osquery.columns.vendor) is attached to port $(osquery.columns.usb_port)

osquery: $(osquery.pack) $(osquery.subquery): USB device from vendor $(osquery.columns.vendor) is attached to port $(osquery.columns.usb_port)

osquery: $(osquery.pack) $(osquery.subquery): OS Kernel module $(osquery.columns.name) is enabled and used by $(osquery.columns.used_by)

osquery: $(osquery.pack) $(osquery.subquery): OS Kernel module $(osquery.columns.name) is enabled and used by $(osquery.columns.used_by)

osquery: $(osquery.pack) $(osquery.subquery): Device $(osquery.columns.path), UID $(osquery.columns.uid), GID $(osquery.columns.gid), type $(osquery.columns.type)

osquery: $(osquery.pack) $(osquery.subquery): Device $(osquery.columns.path), UID $(osquery.columns.uid), GID $(osquery.columns.gid), type $(osquery.columns.type)