Support for OSQuery - https://osquery.io
salt.modules.osquery.
acpi_tables
(attrs=None, where=None)¶New in version Beryllium.
Return acpi_tables information from osquery
CLI Example:
salt '*' osquery.acpi_tables
salt.modules.osquery.
alf
(attrs=None, where=None)¶New in version Beryllium.
Return alf information from osquery
CLI Example:
salt '*' osquery.alf
salt.modules.osquery.
alf_exceptions
(attrs=None, where=None)¶New in version Beryllium.
Return alf_exceptions information from osquery
CLI Example:
salt '*' osquery.alf_exceptions
salt.modules.osquery.
alf_explicit_auths
(attrs=None, where=None)¶New in version Beryllium.
Return alf_explicit_auths information from osquery
CLI Example:
salt '*' osquery.alf_explicit_auths
salt.modules.osquery.
alf_services
(attrs=None, where=None)¶New in version Beryllium.
Return alf_services information from osquery
CLI Example:
salt '*' osquery.alf_services
salt.modules.osquery.
apps
(attrs=None, where=None)¶New in version Beryllium.
Return apps information from osquery
CLI Example:
salt '*' osquery.apps
salt.modules.osquery.
apt_sources
(attrs=None, where=None)¶New in version Beryllium.
Return apt_sources information from osquery
CLI Example:
salt '*' osquery.apt_sources
salt.modules.osquery.
arp_cache
(attrs=None, where=None)¶New in version Beryllium.
Return arp_cache information from osquery
CLI Example:
salt '*' osquery.arp_cache
salt.modules.osquery.
block_devices
(attrs=None, where=None)¶New in version Beryllium.
Return block_devices information from osquery
CLI Example:
salt '*' osquery.block_devices
salt.modules.osquery.
certificates
(attrs=None, where=None)¶New in version Beryllium.
Return certificates information from osquery
CLI Example:
salt '*' osquery.certificates
salt.modules.osquery.
chrome_extensions
(attrs=None, where=None)¶New in version Beryllium.
Return chrome_extensions information from osquery
CLI Example:
salt '*' osquery.chrome_extensions
salt.modules.osquery.
cpuid
(attrs=None, where=None)¶New in version Beryllium.
Return cpuid information from osquery
CLI Example:
salt '*' osquery.cpuid
salt.modules.osquery.
crontab
(attrs=None, where=None)¶New in version Beryllium.
Return crontab information from osquery
CLI Example:
salt '*' osquery.crontab
salt.modules.osquery.
deb_packages
(attrs=None, where=None)¶New in version Beryllium.
Return deb_packages information from osquery
CLI Example:
salt '*' osquery.deb_packages
salt.modules.osquery.
etc_hosts
(attrs=None, where=None)¶New in version Beryllium.
Return etc_hosts information from osquery
CLI Example:
salt '*' osquery.etc_hosts
salt.modules.osquery.
etc_services
(attrs=None, where=None)¶Return etc_services information from osquery
CLI Example:
salt '*' osquery.etc_services
salt.modules.osquery.
file
(attrs=None, where=None)¶New in version Beryllium.
Return file information from osquery
CLI Example:
salt '*' osquery.file
salt.modules.osquery.
file_changes
(attrs=None, where=None)¶New in version Beryllium.
Return file_changes information from osquery
CLI Example:
salt '*' osquery.file_changes
salt.modules.osquery.
firefox_addons
(attrs=None, where=None)¶New in version Beryllium.
Return firefox_addons information from osquery
CLI Example:
salt '*' osquery.firefox_addons
salt.modules.osquery.
groups
(attrs=None, where=None)¶New in version Beryllium.
Return groups information from osquery
CLI Example:
salt '*' osquery.groups
salt.modules.osquery.
hardware_events
(attrs=None, where=None)¶New in version Beryllium.
Return hardware_events information from osquery
CLI Example:
salt '*' osquery.hardware_events
salt.modules.osquery.
hash
(attrs=None, where=None)¶New in version Beryllium.
Return hash information from osquery
CLI Example:
salt '*' osquery.hash
salt.modules.osquery.
homebrew_packages
(attrs=None, where=None)¶New in version Beryllium.
Return homebrew_packages information from osquery
CLI Example:
salt '*' osquery.homebrew_packages
salt.modules.osquery.
interface_addresses
(attrs=None, where=None)¶New in version Beryllium.
Return interface_addresses information from osquery
CLI Example:
salt '*' osquery.interface_addresses
salt.modules.osquery.
interface_details
(attrs=None, where=None)¶New in version Beryllium.
Return interface_details information from osquery
CLI Example:
salt '*' osquery.interface_details
salt.modules.osquery.
iokit_devicetree
(attrs=None, where=None)¶New in version Beryllium.
Return iokit_devicetree information from osquery
CLI Example:
salt '*' osquery.iokit_devicetree
salt.modules.osquery.
iokit_registry
(attrs=None, where=None)¶New in version Beryllium.
Return iokit_registry information from osquery
CLI Example:
salt '*' osquery.iokit_registry
salt.modules.osquery.
kernel_extensions
(attrs=None, where=None)¶New in version Beryllium.
Return kernel_extensions information from osquery
CLI Example:
salt '*' osquery.kernel_extensions
salt.modules.osquery.
kernel_info
(attrs=None, where=None)¶New in version Beryllium.
Return kernel_info information from osquery
CLI Example:
salt '*' osquery.kernel_info
salt.modules.osquery.
kernel_integrity
(attrs=None, where=None)¶New in version Beryllium.
Return kernel_integrity information from osquery
CLI Example:
salt '*' osquery.kernel_integrity
salt.modules.osquery.
kernel_modules
(attrs=None, where=None)¶New in version Beryllium.
Return kernel_modules information from osquery
CLI Example:
salt '*' osquery.kernel_modules
salt.modules.osquery.
keychain_items
(attrs=None, where=None)¶New in version Beryllium.
Return keychain_items information from osquery
CLI Example:
salt '*' osquery.keychain_items
salt.modules.osquery.
last
(attrs=None, where=None)¶New in version Beryllium.
Return last information from osquery
CLI Example:
salt '*' osquery.last
salt.modules.osquery.
launchd
(attrs=None, where=None)¶New in version Beryllium.
Return launchd information from osquery
CLI Example:
salt '*' osquery.launchd
salt.modules.osquery.
listening_ports
(attrs=None, where=None)¶New in version Beryllium.
Return listening_ports_ information from osquery
CLI Example:
salt '*' osquery.listening_ports
salt.modules.osquery.
logged_in_users
(attrs=None, where=None)¶New in version Beryllium.
Return logged_in_users_ information from osquery
CLI Example:
salt '*' osquery.logged_in_users
salt.modules.osquery.
memory_map
(attrs=None, where=None)¶New in version Beryllium.
Return memory_map information from osquery
CLI Example:
salt '*' osquery.memory_map
salt.modules.osquery.
mounts
(attrs=None, where=None)¶New in version Beryllium.
Return mounts_ information from osquery
CLI Example:
salt '*' osquery.mounts
New in version Beryllium.
Return nfs_shares information from osquery
CLI Example:
salt '*' osquery.nfs_shares
salt.modules.osquery.
nvram
(attrs=None, where=None)¶New in version Beryllium.
Return nvram information from osquery
CLI Example:
salt '*' osquery.nvram
salt.modules.osquery.
os_version
(attrs=None, where=None)¶New in version Beryllium.
Return os_version information from osquery
CLI Example:
salt '*' osquery.os_version
salt.modules.osquery.
osquery_extensions
(attrs=None, where=None)¶New in version Beryllium.
Return osquery_extensions information from osquery
CLI Example:
salt '*' osquery.osquery_extensions
salt.modules.osquery.
osquery_flags
(attrs=None, where=None)¶New in version Beryllium.
Return osquery_flags information from osquery
CLI Example:
salt '*' osquery.osquery_flags
salt.modules.osquery.
osquery_info
(attrs=None, where=None)¶New in version Beryllium.
Return osquery_info information from osquery
CLI Example:
salt '*' osquery.osquery_info
salt.modules.osquery.
osquery_registry
(attrs=None, where=None)¶New in version Beryllium.
Return osquery_registry information from osquery
CLI Example:
salt '*' osquery.osquery_registry
salt.modules.osquery.
passwd_changes
(attrs=None, where=None)¶New in version Beryllium.
Return passwd_changes information from osquery
CLI Example:
salt '*' osquery.passwd_changes
salt.modules.osquery.
pci_devices
(attrs=None, where=None)¶New in version Beryllium.
Return pci_devices information from osquery
CLI Example:
salt '*' osquery.pci_devices
salt.modules.osquery.
preferences
(attrs=None, where=None)¶New in version Beryllium.
Return preferences information from osquery
CLI Example:
salt '*' osquery.preferences
salt.modules.osquery.
process_envs
(attrs=None, where=None)¶New in version Beryllium.
Return process_envs information from osquery
CLI Example:
salt '*' osquery.process_envs
salt.modules.osquery.
process_memory_map
(attrs=None, where=None)¶New in version Beryllium.
Return process_memory_map information from osquery
CLI Example:
salt '*' osquery.process_memory_map
salt.modules.osquery.
process_open_files
(attrs=None, where=None)¶New in version Beryllium.
Return process_open_files information from osquery
CLI Example:
salt '*' osquery.process_open_files
salt.modules.osquery.
process_open_sockets
(attrs=None, where=None)¶New in version Beryllium.
Return process_open_sockets information from osquery
CLI Example:
salt '*' osquery.process_open_sockets
salt.modules.osquery.
processes
(attrs=None, where=None)¶New in version Beryllium.
Return processes information from osquery
CLI Example:
salt '*' osquery.processes
salt.modules.osquery.
quarantine
(attrs=None, where=None)¶New in version Beryllium.
Return quarantine information from osquery
CLI Example:
salt '*' osquery.quarantine
salt.modules.osquery.
query
(sql=None)¶New in version Beryllium.
Return time information from osquery
CLI Example:
salt '*' osquery.query "select * from users;"
salt.modules.osquery.
routes
(attrs=None, where=None)¶New in version Beryllium.
Return routes information from osquery
CLI Example:
salt '*' osquery.routes
salt.modules.osquery.
rpm_packages
(attrs=None, where=None)¶New in version Beryllium.
Return cpuid information from osquery
CLI Example:
salt '*' osquery.rpm_packages
salt.modules.osquery.
safari_extensions
(attrs=None, where=None)¶New in version Beryllium.
Return safari_extensions information from osquery
CLI Example:
salt '*' osquery.safari_extensions
New in version Beryllium.
Return shared_memory information from osquery
CLI Example:
salt '*' osquery.shared_memory
salt.modules.osquery.
shell_history
(attrs=None, where=None)¶New in version Beryllium.
Return shell_history information from osquery
CLI Example:
salt '*' osquery.shell_history
salt.modules.osquery.
smbios_tables
(attrs=None, where=None)¶New in version Beryllium.
Return smbios_tables information from osquery
CLI Example:
salt '*' osquery.smbios_tables
salt.modules.osquery.
startup_items
(attrs=None, where=None)¶New in version Beryllium.
Return startup_items information from osquery
CLI Example:
salt '*' osquery.startup_items
salt.modules.osquery.
suid_bin
(attrs=None, where=None)¶New in version Beryllium.
Return suid_bin information from osquery
CLI Example:
salt '*' osquery.suid_bin
salt.modules.osquery.
system_controls
(attrs=None, where=None)¶New in version Beryllium.
Return system_controls information from osquery
CLI Example:
salt '*' osquery.system_controls
salt.modules.osquery.
time
(attrs=None)¶New in version Beryllium.
Return time information from osquery
CLI Example:
salt '*' osquery.time
salt.modules.osquery.
usb_devices
(attrs=None, where=None)¶New in version Beryllium.
Return usb_devices information from osquery
CLI Example:
salt '*' osquery.usb_devices
salt.modules.osquery.
users
(attrs=None, where=None)¶New in version Beryllium.
Return users information from osquery
CLI Example:
salt '*' osquery.users
salt.modules.osquery.
version
()¶New in version Beryllium.
Return version of osquery
CLI Example:
salt '*' osquery.version
salt.modules.osquery.
xattr_where_from
(attrs=None, where=None)¶New in version Beryllium.
Return xattr_where_from information from osquery
CLI Example:
salt '*' osquery.xattr_where_from
salt.modules.osquery.
xprotect_entries
(attrs=None, where=None)¶New in version Beryllium.
Return xprotect_entries information from osquery
CLI Example:
salt '*' osquery.xprotect_entries
salt.modules.osquery.
xprotect_reports
(attrs=None, where=None)¶New in version Beryllium.
Return xprotect_reports information from osquery
CLI Example:
salt '*' osquery.xprotect_reports