Things on this page are fragmentary and immature notes/thoughts of the author. Please read with your own judgement!
-
List all tables.
.\osqueryi .tables
-
Check the schema of a table (e.g., "process").
.\osqueryi ".schema processes"
Querying System Information
.\osqueryi.exe "select * from system_info"
Querying Docker
Please refer to Manage …