```
osquery> select path, on_disk, cmdline FROM...
# generali
infomaniac
02/01/2017, 8:02 PM Copy code
osquery> select path, on_disk, cmdline FROM processes where pid = 10683;
path = /bin/bash
on_disk = 1
cmdline = /bin/bash /tmp/xinfomaniac
02/01/2017, 8:02 PMosquery> select path, on_disk, cmdline FROM processes where pid = 10683;
path = /bin/bash
on_disk = 1
cmdline = /bin/bash /tmp/x