groob
10/09/2020, 12:19 PMalessandrogario
10/09/2020, 12:21 PMgroob
10/09/2020, 12:27 PMalessandrogario
10/09/2020, 12:27 PMgroob
10/09/2020, 12:28 PMalessandrogario
10/09/2020, 12:28 PMgroob
10/09/2020, 12:36 PMalessandrogario
10/09/2020, 12:37 PMgroob
10/09/2020, 12:38 PMalessandrogario
10/09/2020, 12:40 PMgrahamgilbert
10/09/2020, 1:18 PMgroob
10/09/2020, 4:28 PMgrahamgilbert
10/09/2020, 4:54 PMgroob
10/09/2020, 5:05 PMgrahamgilbert
10/09/2020, 5:32 PMosquery> DELETE from example_table;
(osquery.ExtensionPluginRequest) (len=2) {
(string) (len=6) "action": (string) (len=8) "generate",
(string) (len=7) "context": (string) (len=241) "{\"constraints\":[{\"name\":\"big_int\",\"list\":[],\"affinity\":\"BIGINT\"},{\"name\":\"double\",\"list\":[],\"affinity\":\"DOUBLE\"},{\"name\":\"integer\",\"list\":[],\"affinity\":\"INTEGER\"},{\"name\":\"text\",\"list\":[],\"affinity\":\"TEXT\"}],\"colsUsed\":[],\"colsUsedBitset\":0}"
}
(osquery.ExtensionPluginRequest) (len=3) {
(string) (len=6) "action": (string) (len=6) "delete",
(string) (len=7) "context": (string) (len=18) "{\"constraints\":[]}",
(string) (len=2) "id": (string) (len=1) "0"
}
DLETEEEE
{map[]}
DELETING
osquery> DELETE from example_table where text="wee";
(osquery.ExtensionPluginRequest) (len=2) {
(string) (len=6) "action": (string) (len=8) "generate",
(string) (len=7) "context": (string) (len=268) "{\"constraints\":[{\"name\":\"big_int\",\"list\":[],\"affinity\":\"BIGINT\"},{\"name\":\"double\",\"list\":[],\"affinity\":\"DOUBLE\"},{\"name\":\"integer\",\"list\":[],\"affinity\":\"INTEGER\"},{\"name\":\"text\",\"list\":[{\"op\":2,\"expr\":\"wee\"}],\"affinity\":\"TEXT\"}],\"colsUsed\":[\"text\"],\"colsUsedBitset\":1}"
}
osquery>
groob
10/09/2020, 10:42 PMalessandrogario
10/09/2020, 10:48 PMzwass
10/09/2020, 11:03 PMSELECT
as part of the DELETE
process?grahamgilbert
10/10/2020, 1:10 AMalessandrogario
10/13/2020, 5:54 PMgrahamgilbert
11/05/2020, 8:02 PM