Title
#general
e

erichs

07/26/2018, 2:16 PM
@Prakhar I’ve wondered the same thing myself, recently. One approach might be to write a custom Augeas lens to parse your file, and access those contents via the
augeas
table in osquery. I’d love to know if other have other ideas on how to query the contents of a file.
p

Prakhar

07/27/2018, 7:35 AM
Thanks for the suggestion, I was hoping if there's an exisiting feature in osquery to achieve this but nevertheless. If we find any other approach apart from writing cutom tables I'll post it here.
10:13 AM
I'll try the augeas table though, seems like a good option