Configurable flags that modify osquery’s behavior.

Platform support

Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: osquery_flags

  • Windows
  • Linux
  • Mac OSX
  • Free BSD

Table schema

Name Type Description
name TEXT Flag name
type TEXT Flag type
description TEXT Flag description
default_value TEXT Flag default value
value TEXT Flag value
shell_only INTEGER Is the flag shell only?

Query examples

Select all the results for the given table.

SELECT * FROM osquery_flags;