https://github.com/osquery/osquery logo
Title
p

PaulD

07/15/2019, 2:15 PM
Hi there, I was looking for a query which can monitor the hash binaries. I found the table "signature" for this job, but it only runs on macOS, and I was wondering if there is something else available for Linux operating systems ? (maybe I need to ask this on the general chanel ?)
z

zwass

07/15/2019, 5:38 PM
You'll reach a wider audience in #general, but take a look at the
hash
table. You may want to join it with the
processes
table, for example.
👍 1