Audit and Remediation: How to Access Information on SQL Tables in Live Query

Products

• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)

Issue/Introduction

Access information on SQL Tables for use with Live Query

Environment

• Carbon Black Console: All versions
• Audit and Remediation: All versions

Resolution

1. Select Live Query from the left of the PSC Console 
2. Select New Query 
3. Click on the SQL Query Tab 
4. Click on Tables link on the right 
5. This will open a page with information on available SQL Tables

Additional Information

A table specifically requesting CB Sensor data is discussed here: https://github.com/facebook/osquery/blob/experimental/specs/carbon_black_info.table