Files
Swann Legras e56a0abbfb Key change to be in line with OSSEM-DM
* event_code --> event_id
* title --> name
2022-05-03 01:01:34 +02:00

30 lines
641 B
YAML

name: Memory_map Table
description: OS memory region map.
platform: linux
log_source: osquery
event_id: memory_map
event_version: 4.4.2
event_fields:
- standard_name: TBD
standard_type: TBD
name: name
type: TEXT
description: Region name
sample_value: TBD
- standard_name: TBD
standard_type: TBD
name: start
type: TEXT
description: Start address of memory region
sample_value: TBD
- standard_name: TBD
standard_type: TBD
name: end
type: TEXT
description: End address of memory region
sample_value: TBD
references:
- text: OSQuery table documentation
link: https://osquery.io/schema/current#memory_map
tags: []