File tree Expand file tree Collapse file tree 1 file changed +18
-0
lines changed Expand file tree Collapse file tree 1 file changed +18
-0
lines changed Original file line number Diff line number Diff line change @@ -55,6 +55,24 @@ example:
55
55
osquery.start_extension(name = " my_awesome_extension" ,
56
56
version = " 1.0.0" ,)
57
57
58
+ To test this code start an osquery shell:
59
+
60
+ .. code-block :: none
61
+
62
+ osqueryi --nodisable_extensions
63
+ osquery> select value from osquery_flags where name = 'extensions_socket';
64
+ +-----------------------------------+
65
+ | value |
66
+ +-----------------------------------+
67
+ | /Users/USERNAME/.osquery/shell.em |
68
+ +-----------------------------------+
69
+
70
+ Then start the Python extension:
71
+
72
+ .. code-block :: none
73
+
74
+ python ./my_table_plugin.py --socket /Users/USERNAME/.osquery/shell.em
75
+
58
76
This will register a table called "foobar". As you can see, the table will
59
77
return two rows:
60
78
You can’t perform that action at this time.
0 commit comments