File tree Expand file tree Collapse file tree 1 file changed +18
-0
lines changed Expand file tree Collapse file tree 1 file changed +18
-0
lines changed Original file line number Diff line number Diff line change @@ -55,6 +55,24 @@ example:
5555 osquery.start_extension(name = " my_awesome_extension" ,
5656 version = " 1.0.0" ,)
5757
58+ To test this code start an osquery shell:
59+
60+ .. code-block :: none
61+
62+ osqueryi --nodisable_extensions
63+ osquery> select value from osquery_flags where name = 'extensions_socket';
64+ +-----------------------------------+
65+ | value |
66+ +-----------------------------------+
67+ | /Users/USERNAME/.osquery/shell.em |
68+ +-----------------------------------+
69+
70+ Then start the Python extension:
71+
72+ .. code-block :: none
73+
74+ python ./my_table_plugin.py --socket /Users/USERNAME/.osquery/shell.em
75+
5876 This will register a table called "foobar". As you can see, the table will
5977return two rows:
6078
You can’t perform that action at this time.
0 commit comments