Can I read Sophos Osquery Table Schema Overview on EtoBox?
Sophos Osquery Table Schema Overview by Anderson Moreno is a document available to read on EtoBox.
What is Sophos Osquery Table Schema Overview about?
The document describes the schema for tables provided by the Sophos osquery extension, including columns and examples. It includes tables for directory journal events, DNS journal events, Sophos endpoint information, and Sophos event details for a given family ID. The tables provide information on process, thread and file details for events related to directories, DNS queries and endpoint/event metadata.
- Author
- Anderson Moreno
- Language
- EN