Channels
  • MoodyMudit

    MoodyMudit

    4 months ago
    Hi, I am fetching some data using osquery’s *crontab* table. There are some ambiguous entries which are getting listed. Can someone please help me understand why this is happening. Here is the data fetched.
    {  
       command: {}'.format(e))
       path: /etc/cron.d/sched_prov.py
       day_of_month: enforce
       day_of_week: endpoints:
       hour: to
       minute: print('Failed
       month: maintenance
     }
  • zwass

    zwass

    4 months ago
    Seems like probably a bug with the
    crontab
    parsing. Can you paste the corresponding line from the
    crontab
    file?
  • s

    seph

    4 months ago
    That kind looks like it tried to parse
    /etc/cron.d/sched_prov.py
    . Why do you have a python file in your crontab directory?
View count: 25