Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
office_mru
View recently opened Office documents.
Column | Type | Description |
---|---|---|
application | text | Associated Office application |
last_opened_time | bigint | Most recent opened time file was opened |
path | text | File path |
sid | text | User SID |
version | text | Office application version number |
select * from office_mru;