Current File : //lib/python2.7/site-packages/salt/modules/osquery.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z e j
e � Z i d d 6d d 6d d 6Z
d
Z d � Z d � Z d
d � Z d d d
d � Z d � Z d d d � Z d d d � Z d d d � Z d d d � Z d d d � Z d d d � Z d d d � Z d d d � Z d d d � Z d d d � Z d d d � Z d d d � Z d d d � Z! d d d � Z" d d d � Z# d d d � Z$ d d d! � Z% d d d" � Z& d d d# � Z' d d d$ � Z( d d d% � Z) d d d& � Z* d d d' � Z+ d d d( � Z, d d d) � Z- d d d* � Z. d d d+ � Z/ d d d, � Z0 d d d- � Z1 d d d. � Z2 d d d/ � Z3 d d d0 � Z4 d d d1 � Z5 d d d2 � Z6 d d d3 � Z7 d d d4 � Z8 d d d5 � Z9 d d d6 � Z: d d d7 � Z; d d d8 � Z< d d d9 � Z= d d d: � Z> d d d; � Z? d d d< � Z@ d d d= � ZA d d d> � ZB d d d? � ZC d d d@ � ZD d d dA � ZE d d dB � ZF d d dC � ZG d d dD � ZH d d dE � ZI d d dF � ZJ d d dG � ZK d d dH � ZL d d dI � ZM d d dJ � ZN d d dK � ZO d d dL � ZP d d dM � ZQ d d dN � ZR d d dO � ZS d d dP � ZT d d dQ � ZU d d dR � ZV d d dS � ZW d d dT � ZX d dU � ZY d dV � ZZ d S(W uG
Support for OSQuery - https://osquery.io.
.. versionadded:: 2015.8.0
i ( t absolute_importt print_functiont unicode_literalsNu fileu file_u hashu hash_u timeu time_u osqueryc C@ s# t j j j d � r t St d f S( Nu osqueryiuR The osquery execution module cannot be loaded: osqueryi binary is not in the path.( t saltt utilst patht whicht __virtualname__t False( ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt __virtual__ s c C@ s� d g d g d j | � g } t d | � } | d d k r� g } t j j j | d � } x | D] } | j | d � qf W| St S( u8
Helper function to find valid table attributes
u osqueryiu --jsonu pragma table_info({0})u cmd.run_allu retcodei u stdoutu name( t formatt __salt__R R t jsont loadst appendR ( t tablet cmdt rest attrst textt item( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt _table_attrs$ s
u jsonc C@ s� i t d 6} d g d g | g } t d | � } | d rY t | d <| d | d <n t j j j | d � | d <t j d | � | S(
u4
Helper function to run raw osquery queries
u resultu osqueryiu --jsonu cmd.run_allu stderru erroru stdoutu datau == %s ==( t TrueR R R R R R
t logt debug( t sqlR
t retR R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt _osquery3 s
c
C@ sA i t d 6} | r� t | t � r� t | � } | r� x> | D]6 } | | k r; t | d <d j | | � | d <| Sq; Wd j | � } q� t | d <d j | � | d <| Sq� d | d <t | d <| Sn d } d j | | � } | r� d j | | � } n d
j | � } t | � } | d r/| d | d <n | d | d <| S(
u0
Helper function to run osquery queries
u resultu* {0} is not a valid attribute for table {1}u commentu ,u Invalid table {0}.u" attrs must be specified as a list.u *u select {0} from {1}u
{0} where {1}u {0};u datau error( R t
isinstancet listR R R
t joinR (
R R t whereR
R t valid_attrst at _attrsR R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt _osquery_cmdF s8
c C@ s� i t d 6d d 6} t d d d d g � } d | k r� | d r� d | k r� t | d t � r� | d d j d d
� p~ | Sn | S( uq
Return version of osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.version
u resultu OSQuery version unavailable.u commentR u osquery_infoR u versionu datai u ( R R# R R t get( t
_false_returnR ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt versionr s
!c C@ s; t d d k r) t d d d | d | � Si t d 6d d 6S(
u�
Return cpuid information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.rpm_packages
u os_familyu RedHatR u rpm_packagesR R u resultu( Only available on Red Hat based systems.u comment( t
__grains__R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt rpm_packages� s
c C@ s; t d d k r) t d d d | d | � Si t d 6d d
6S( u�
Return kernel_integrity information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.kernel_integrity
u os_familyu RedHatu DebianR u kernel_integrityR R u resultu2 Only available on Red Hat or Debian based systems.u comment( u RedHatu Debian( R' R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt kernel_integrity� s
c C@ s; t d d k r) t d d d | d | � Si t d 6d d
6S( u�
Return kernel_modules information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.kernel_modules
u os_familyu RedHatu DebianR u kernel_modulesR R u resultu2 Only available on Red Hat or Debian based systems.u comment( u RedHatu Debian( R' R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt kernel_modules� s
c C@ s; t d d k r) t d d d | d | � Si t d 6d d
6S( u�
Return memory_map information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.memory_map
u os_familyu RedHatu DebianR u
memory_mapR R u resultu2 Only available on Red Hat or Debian based systems.u comment( u RedHatu Debian( R' R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
memory_map� s
c C@ s; t d d k r) t d d d | d | � Si t d 6d d
6S( u�
Return process_memory_map information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.process_memory_map
u os_familyu RedHatu DebianR u process_memory_mapR R u resultu2 Only available on Red Hat or Debian based systems.u comment( u RedHatu Debian( R' R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt process_memory_map� s
c C@ s; t d d k r) t d d d | d | � Si t d 6d d
6S( u�
Return shared_memory information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.shared_memory
u os_familyu RedHatu DebianR u
shared_memoryR R u resultu2 Only available on Red Hat or Debian based systems.u comment( u RedHatu Debian( R' R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
shared_memory� s
c C@ s; t d d k r) t d d d | d | � Si t d 6d d 6S(
u�
Return apt_sources information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.apt_sources
u os_familyu DebianR u apt_sourcesR R u resultu' Only available on Debian based systems.u comment( R' R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt apt_sources� s
c C@ s; t d d k r) t d d d | d | � Si t d 6d d 6S(
u�
Return deb_packages information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.deb_packages
u os_familyu DebianR u deb_packagesR R u resultu' Only available on Debian based systems.u comment( R' R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt deb_packages� s
c C@ s t d d d | d | � S( u�
Return acpi_tables information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.acpi_tables
R u acpi_tablesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt acpi_tables� s
c C@ s t d d d | d | � S( u�
Return arp_cache information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.arp_cache
R u arp_cacheR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt arp_cache s
c C@ s t d d d | d | � S( u�
Return block_devices information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.block_devices
R u
block_devicesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
block_devices s
c C@ s t d d d | d | � S( u{
Return cpuid information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.cpuid
R u cpuidR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt cpuid% s
c C@ s t d d d | d | � S( u
Return crontab information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.crontab
R u crontabR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt crontab2 s
c C@ s t d d d | d | � S( u�
Return etc_hosts information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.etc_hosts
R u etc_hostsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt etc_hosts? s
c C@ s t d d d | d | � S( u�
Return etc_services information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.etc_services
R u etc_servicesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt etc_servicesL s
c C@ s t d d d | d | � S( u�
Return file_changes information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.file_changes
R u file_changesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt file_changesY s
c C@ s t d d d | d | � S( u}
Return groups information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.groups
R u groupsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt groupsf s
c C@ s t d d d | d | � S( u�
Return hardware_events information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.hardware_events
R u hardware_eventsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt hardware_eventss s
c C@ s t d d d | d | � S( u�
Return interface_addresses information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.interface_addresses
R u interface_addressesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt interface_addresses� s
c C@ s t d d d | d | � S( u�
Return interface_details information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.interface_details
R u interface_detailsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt interface_details� s
c C@ s t d d d | d | � S( u�
Return kernel_info information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.kernel_info
R u kernel_infoR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt kernel_info� s
c C@ s t d d d | d | � S( uy
Return last information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.last
R u lastR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt last� s
c C@ s t d d d | d | � S( u�
Return listening_ports information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.listening_ports
R u listening_portsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt listening_ports� s
c C@ s t d d d | d | � S( u�
Return logged_in_users information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.logged_in_users
R u logged_in_usersR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt logged_in_users� s
c C@ s t d d d | d | � S( u}
Return mounts information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.mounts
R u mountsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt mounts� s
c C@ s t d d d | d | � S( u�
Return os_version information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.os_version
R u
os_versionR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
os_version� s
c C@ s t d d d | d | � S( u�
Return passwd_changes information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.passwd_changes
R u passwd_changesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt passwd_changes� s
c C@ s t d d d | d | � S( u�
Return pci_devices information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.pci_devices
R u pci_devicesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt pci_devices� s
c C@ s t d d d | d | � S( u�
Return process_envs information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.process_envs
R u process_envsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt process_envs s
c C@ s t d d d | d | � S( u�
Return process_open_files information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.process_open_files
R u process_open_filesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt process_open_files s
c C@ s t d d d | d | � S( u�
Return process_open_sockets information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.process_open_sockets
R u process_open_socketsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt process_open_sockets s
c C@ s t d d d | d | � S( u�
Return processes information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.processes
R u processesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt processes) s
c C@ s t d d d | d | � S( u}
Return routes information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.routes
R u routesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt routes6 s
c C@ s t d d d | d | � S( u�
Return shell_history information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.shell_history
R u
shell_historyR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
shell_historyC s
c C@ s t d d d | d | � S( u�
Return smbios_tables information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.smbios_tables
R u
smbios_tablesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
smbios_tablesP s
c C@ s t d d d | d | � S( u�
Return suid_bin information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.suid_bin
R u suid_binR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt suid_bin] s
c C@ s t d d d | d | � S( u�
Return system_controls information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.system_controls
R u system_controlsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt system_controlsj s
c C@ s t d d d | d | � S( u�
Return usb_devices information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.usb_devices
R u usb_devicesR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt usb_devicesw s
c C@ s t d d d | d | � S( u{
Return users information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.users
R u usersR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt users� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( uw
Return alf information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.alf
R u alfR R u resultu Only available on macOS systems.u comment( R R t platformt is_darwinR# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt alf� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return alf_exceptions information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.alf_exceptions
R u alf_exceptionsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt alf_exceptions� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return alf_explicit_auths information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.alf_explicit_auths
R u alf_explicit_authsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt alf_explicit_auths� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return alf_services information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.alf_services
R u alf_servicesR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt alf_services� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( uy
Return apps information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.apps
R u appsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt apps� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return certificates information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.certificates
R u certificatesR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt certificates� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return chrome_extensions information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.chrome_extensions
R u chrome_extensionsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt chrome_extensions� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return firefox_addons information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.firefox_addons
R u firefox_addonsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt firefox_addons� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return homebrew_packages information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.homebrew_packages
R u homebrew_packagesR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt homebrew_packages s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return iokit_devicetree information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.iokit_devicetree
R u iokit_devicetreeR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt iokit_devicetree s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return iokit_registry information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.iokit_registry
R u iokit_registryR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt iokit_registry' s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return kernel_extensions information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.kernel_extensions
R u kernel_extensionsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt kernel_extensions6 s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return keychain_items information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.keychain_items
R u keychain_itemsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt keychain_itemsE s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u
Return launchd information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.launchd
R u launchdR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt launchdT s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return nfs_shares information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.nfs_shares
R u
nfs_sharesR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
nfs_sharesc s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u{
Return nvram information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.nvram
R u nvramR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt nvramr s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return preferences information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.preferences
R u preferencesR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt preferences� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return quarantine information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.quarantine
R u
quarantineR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
quarantine� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return safari_extensions information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.safari_extensions
R u safari_extensionsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt safari_extensions� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return startup_items information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.startup_items
R u
startup_itemsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
startup_items� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return xattr_where_from information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.xattr_where_from
R u xattr_where_fromR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt xattr_where_from� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return xprotect_entries information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.xprotect_entries
R u xprotect_entriesR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt xprotect_entries� s
c C@ s= t j j j � r+ t d d d | d | � Si t d 6d d 6S( u�
Return xprotect_reports information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.xprotect_reports
R u xprotect_reportsR R u resultu Only available on macOS systems.u comment( R R RO RP R# R ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt xprotect_reports� s
c C@ s t d d d | d | � S( uy
Return file information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.file
R u fileR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt file_� s
c C@ s t d d d | d | � S( uy
Return hash information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.hash
R u hashR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt hash_� s
c C@ s t d d d | d | � S( u�
Return osquery_extensions information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.osquery_extensions
R u osquery_extensionsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt osquery_extensions s
c C@ s t d d d | d | � S( u�
Return osquery_flags information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.osquery_flags
R u
osquery_flagsR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt
osquery_flags s
c C@ s t d d d | d | � S( u�
Return osquery_info information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.osquery_info
R u osquery_infoR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt osquery_info s
c C@ s t d d d | d | � S( u�
Return osquery_registry information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.osquery_registry
R u osquery_registryR R ( R# ( R R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt osquery_registry+ s
c C@ s t d d d | � S( uy
Return time information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.time
R u timeR ( R# ( R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt time_8 s
c C@ s
t | � S( u�
Return time information from osquery
CLI Example:
.. code-block:: bash
salt '*' osquery.query "select * from users;"
( R ( R ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt queryE s
([ t __doc__t
__future__R R R t loggingt salt.utils.jsonR t salt.utils.patht salt.utils.platformt getLoggert __name__R t __func_alias__R R R R t NoneR# R& R( R) R* R+ R, R- R. R/ R0 R1 R2 R3 R4 R5 R6 R7 R8 R9 R: R; R< R= R> R? R@ RA RB RC RD RE RF RG RH RI RJ RK RL RM RN RQ RR RS RT RU RV RW RX RY RZ R[ R\ R] R^ R_ R` Ra Rb Rc Rd Re Rf Rg Rh Ri Rj Rk Rl Rm Rn Ro ( ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/osquery.pyt <module> s�
,
Mini Shell