Audit and Remediation: How to Access Information on SQL Tables in Live Query

[#1]

Environment

• Carbon Black Console: All versions
• Audit and Remediation: All versions

Objective

Access information on SQL Tables for use with Live Query

Resolution

1. Select Live Query from the left of the PSC Console 
2. Select New Query 
3. Click on the SQL Query Tab 
4. Click on Tables link on the right 
5. This will open a page with information on available SQL Tables

Additional Notes

A table specifically requesting CB Sensor data is discussed here: osquery/carbon_black_info.table at experimental · osquery/osquery

Related Content

Cb LiveQuery : How to Query Endpoints Using Query Builder 
Audit and Remediation: How to Free-Form Query Endpoints 
Audit and Remediation: How To Stop a Running Query