<@U44D5515H> sure, the `file` table can take globb...
# generalt
theopolis
04/09/2017, 1:19 AM
@anuj sure, the
file Copy code
osquery> select path, inode, mode, size, ctime from file where path LIKE '/boot/vmlin%' limit 1;
+---------------------------------+----------+------+---------+------------+
| path | inode | mode | size | ctime |
+---------------------------------+----------+------+---------+------------+
| /boot/vmlinuz-3.16.0-34-generic | 13369359 | 0600 | 6350864 | 1430031948 |
+---------------------------------+----------+------+---------+------------+