Can osquery generate apt package information like it does rpm?

Question

I'm looking to generate lists of apt package versions for specific packages, like sudo,ssh, etc. OSQuery seems to have an option to generate this with rpm_packages however I can find no mention of apt_packages.

I don't mean apt_sources, and the apps table appears to be a MacOS only thing.

I might be just missing a table listing versions of binaries.

Oh. the .file table has this information; kinda. Just has to be enabled. — BDM, Feb 03 '21 at 16:37
The .file table only has file information, not binary version information. — BDM, Feb 03 '21 at 16:50

score 1 · Accepted Answer · answered Feb 03 '21 at 16:45

1

Are you looking for the deb_packages table?

apps is macOS specific, as it enumerates the macOS Applications.

answered Feb 03 '21 at 16:45

seph

813
6
16

This was it exactly. I cannot believe I missed this. Thank you. – BDM Feb 09 '21 at 17:25

Can osquery generate apt package information like it does rpm?

1 Answers1