Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Title
h
Hugh (Zercurity)
07/10/2020, 11:11 AMof the users mouse activity? applications? or just general system CPU usage?
b
binu
07/10/2020, 6:44 PMFor users mouse activity ,and application
h
Hugh (Zercurity)
07/10/2020, 6:49 PMsorry, couldn't help you with that use case.
b
binu
07/12/2020, 9:22 AMOk thanks
Machine active/inactive(idle) times query available in osquery ?
h
Hugh (Zercurity)
07/15/2020, 4:15 PMSELECT (SUM(user) + SUM(nice) + SUM(system) + SUM(idle) * 1.0) AS tsb, SUM(COALESCE(idle, 0)) + SUM(COALESCE(iowait, 0)) AS itsb FROM cpu_time;full example in the link to medium I posted
though you will have to run this query periodically to check the difference in times. In order to correctly calculate usage.
b
binu
07/15/2020, 4:36 PMOk thanks for your help