executable object NXQL (classic)

An application is an executable program, for example “winword.exe”.

NameTypeOperating systemsProperties

application_company

string

Windows | macOS

Application company

application_name

string

Windows | macOS

Application name

database_usage

permill

Windows | macOS

Percentage of the database used by information related with the executable.

description

string

Windows

Executable description

first_seen

datetime

Windows | macOS

NU

First time activity of the executable was recorded on any device.

id

identifier

Windows | macOS

Unique executable identifier

known_packages

string

Windows | macOS

List of packages known to contain the executable. This list is not exhaustive: The presence of a package does not necessarily imply that on a given device the executable was installed through that package.

last_seen

datetime

Windows | macOS

NU

Last time activity of the executable was recorded on any device.

name

string

Windows | macOS

Executable name

platform

enum

Windows | macOS

The platform (operating system family) on which the executable is running.

storage_policy

enum

Windows | macOS

Indicates the event storage policy for the executable. Possible values are:

  • all: web requests, connections and executions are stored;

  • connections and executions;

  • executions;

  • none: no activity is recorded.

total_active_days

day

Windows | macOS

Total number of days the executable was active.

Last updated