Support for OSQuery - https://osquery.io.
New in version 2015.8.0.
Return acpi_tables information from osquery
CLI Example:
salt '*' osquery.acpi_tables
Return alf information from osquery
CLI Example:
salt '*' osquery.alf
Return alf_exceptions information from osquery
CLI Example:
salt '*' osquery.alf_exceptions
Return alf_explicit_auths information from osquery
CLI Example:
salt '*' osquery.alf_explicit_auths
Return alf_services information from osquery
CLI Example:
salt '*' osquery.alf_services
Return apps information from osquery
CLI Example:
salt '*' osquery.apps
Return apt_sources information from osquery
CLI Example:
salt '*' osquery.apt_sources
Return arp_cache information from osquery
CLI Example:
salt '*' osquery.arp_cache
Return block_devices information from osquery
CLI Example:
salt '*' osquery.block_devices
Return certificates information from osquery
CLI Example:
salt '*' osquery.certificates
Return chrome_extensions information from osquery
CLI Example:
salt '*' osquery.chrome_extensions
Return cpuid information from osquery
CLI Example:
salt '*' osquery.cpuid
Return crontab information from osquery
CLI Example:
salt '*' osquery.crontab
Return deb_packages information from osquery
CLI Example:
salt '*' osquery.deb_packages
Return etc_hosts information from osquery
CLI Example:
salt '*' osquery.etc_hosts
Return etc_services information from osquery
CLI Example:
salt '*' osquery.etc_services
Return file information from osquery
CLI Example:
salt '*' osquery.file
Return file_changes information from osquery
CLI Example:
salt '*' osquery.file_changes
Return firefox_addons information from osquery
CLI Example:
salt '*' osquery.firefox_addons
Return groups information from osquery
CLI Example:
salt '*' osquery.groups
Return hardware_events information from osquery
CLI Example:
salt '*' osquery.hardware_events
Return hash information from osquery
CLI Example:
salt '*' osquery.hash
Return homebrew_packages information from osquery
CLI Example:
salt '*' osquery.homebrew_packages
Return interface_addresses information from osquery
CLI Example:
salt '*' osquery.interface_addresses
Return interface_details information from osquery
CLI Example:
salt '*' osquery.interface_details
Return iokit_devicetree information from osquery
CLI Example:
salt '*' osquery.iokit_devicetree
Return iokit_registry information from osquery
CLI Example:
salt '*' osquery.iokit_registry
Return kernel_extensions information from osquery
CLI Example:
salt '*' osquery.kernel_extensions
Return kernel_info information from osquery
CLI Example:
salt '*' osquery.kernel_info
Return kernel_integrity information from osquery
CLI Example:
salt '*' osquery.kernel_integrity
Return kernel_modules information from osquery
CLI Example:
salt '*' osquery.kernel_modules
Return keychain_items information from osquery
CLI Example:
salt '*' osquery.keychain_items
Return last information from osquery
CLI Example:
salt '*' osquery.last
Return launchd information from osquery
CLI Example:
salt '*' osquery.launchd
Return listening_ports information from osquery
CLI Example:
salt '*' osquery.listening_ports
Return logged_in_users information from osquery
CLI Example:
salt '*' osquery.logged_in_users
Return memory_map information from osquery
CLI Example:
salt '*' osquery.memory_map
Return mounts information from osquery
CLI Example:
salt '*' osquery.mounts
Return nfs_shares information from osquery
CLI Example:
salt '*' osquery.nfs_shares
Return nvram information from osquery
CLI Example:
salt '*' osquery.nvram
Return os_version information from osquery
CLI Example:
salt '*' osquery.os_version
Return osquery_extensions information from osquery
CLI Example:
salt '*' osquery.osquery_extensions
Return osquery_flags information from osquery
CLI Example:
salt '*' osquery.osquery_flags
Return osquery_info information from osquery
CLI Example:
salt '*' osquery.osquery_info
Return osquery_registry information from osquery
CLI Example:
salt '*' osquery.osquery_registry
Return passwd_changes information from osquery
CLI Example:
salt '*' osquery.passwd_changes
Return pci_devices information from osquery
CLI Example:
salt '*' osquery.pci_devices
Return preferences information from osquery
CLI Example:
salt '*' osquery.preferences
Return process_envs information from osquery
CLI Example:
salt '*' osquery.process_envs
Return process_memory_map information from osquery
CLI Example:
salt '*' osquery.process_memory_map
Return process_open_files information from osquery
CLI Example:
salt '*' osquery.process_open_files
Return process_open_sockets information from osquery
CLI Example:
salt '*' osquery.process_open_sockets
Return processes information from osquery
CLI Example:
salt '*' osquery.processes
Return quarantine information from osquery
CLI Example:
salt '*' osquery.quarantine
Return time information from osquery
CLI Example:
salt '*' osquery.query "select * from users;"
Return routes information from osquery
CLI Example:
salt '*' osquery.routes
Return cpuid information from osquery
CLI Example:
salt '*' osquery.rpm_packages
Return safari_extensions information from osquery
CLI Example:
salt '*' osquery.safari_extensions
Return shared_memory information from osquery
CLI Example:
salt '*' osquery.shared_memory
Return shell_history information from osquery
CLI Example:
salt '*' osquery.shell_history
Return smbios_tables information from osquery
CLI Example:
salt '*' osquery.smbios_tables
Return startup_items information from osquery
CLI Example:
salt '*' osquery.startup_items
Return suid_bin information from osquery
CLI Example:
salt '*' osquery.suid_bin
Return system_controls information from osquery
CLI Example:
salt '*' osquery.system_controls
Return time information from osquery
CLI Example:
salt '*' osquery.time
Return usb_devices information from osquery
CLI Example:
salt '*' osquery.usb_devices
Return users information from osquery
CLI Example:
salt '*' osquery.users
Return version of osquery
CLI Example:
salt '*' osquery.version
Return xattr_where_from information from osquery
CLI Example:
salt '*' osquery.xattr_where_from
Return xprotect_entries information from osquery
CLI Example:
salt '*' osquery.xprotect_entries
Return xprotect_reports information from osquery
CLI Example:
salt '*' osquery.xprotect_reports
Docs for previous releases are available on readthedocs.org.
Latest Salt release: 3006.1
acpi_tables()
alf()
alf_exceptions()
alf_explicit_auths()
alf_services()
apps()
apt_sources()
arp_cache()
block_devices()
certificates()
chrome_extensions()
cpuid()
crontab()
deb_packages()
etc_hosts()
etc_services()
file_()
file_changes()
firefox_addons()
groups()
hardware_events()
hash_()
homebrew_packages()
interface_addresses()
interface_details()
iokit_devicetree()
iokit_registry()
kernel_extensions()
kernel_info()
kernel_integrity()
kernel_modules()
keychain_items()
last()
launchd()
listening_ports()
logged_in_users()
memory_map()
mounts()
nfs_shares()
nvram()
os_version()
osquery_extensions()
osquery_flags()
osquery_info()
osquery_registry()
passwd_changes()
pci_devices()
preferences()
process_envs()
process_memory_map()
process_open_files()
process_open_sockets()
processes()
quarantine()
query()
routes()
rpm_packages()
safari_extensions()
shared_memory()
shell_history()
smbios_tables()
startup_items()
suid_bin()
system_controls()
time_()
usb_devices()
users()
version()
xattr_where_from()
xprotect_entries()
xprotect_reports()