Skip to content

Instantly share code, notes, and snippets.

@insanitybit

insanitybit/example.gql Secret

Created July 1, 2021 13:20
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save insanitybit/cd997e8d367889708edc3ec221b89430 to your computer and use it in GitHub Desktop.
Save insanitybit/cd997e8d367889708edc3ec221b89430 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
example.gql
parent = {
process_name: has(process_name) .
process_id: eq(1234) .
child_processes: @children .
}
children = {
binary_location: @program_files .
}
program_files = {
path: contains("program_files") || contains("/bin/") .
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment