osquery – misc

osquery> select timezone from time;

osquery> select timezone from time;

SELECT DISTINCT      process.name,     listening.port,      process.pid     FROM processes AS process
     JOIN listening_ports AS listening     ON process.pid = listening.pid      WHERE listening.address = '0.0.0.0';

select memory_free from memory_info;

PRAGMA table_info(processes)

select pid,name from processes;

select name from block_devices;