https://github.com/osquery/osquery logo
Title
e

Erich Stoekl

05/14/2020, 3:48 PM
Is it possible to query environment variables directly with an osquery statement?
b

blaedj

05/14/2020, 3:53 PM
maybe the process_envs table?
s

seph

05/14/2020, 5:28 PM
env variables for what? I see a windows
default_environment
table. In posix systems I could imagine querying osquery’s environment (though I don’t think it exists) but that has very little to do with other programs
Oh hey.
process_envs
😁 1
e

Erich Stoekl

05/14/2020, 5:43 PM
Thanks!
s

seph

05/14/2020, 5:44 PM
(presumably that’s reading proc, and needs root)