Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
background_activities_moderator
Background Activities Moderator (BAM) tracks application execution.
Column | Type | Description |
---|---|---|
last_execution_time | bigint | Most recent time application was executed. |
path | text | Application file path. |
sid | text | User SID. |
select * from background_activities_moderator;