executable object NXQL (classic)
An application is an executable program, for example “winword.exe”.
Name | Type | Operating systems | Properties |
---|---|---|---|
application_company | string | Windows | macOS | |
Application company | |||
application_name | string | Windows | macOS | |
Application name | |||
database_usage | permill | Windows | macOS | |
Percentage of the database used by information related with the executable. | |||
description | string | Windows | |
Executable description | |||
first_seen | datetime | Windows | macOS | NU |
First time activity of the executable was recorded on any device. | |||
id | identifier | Windows | macOS | |
Unique executable identifier | |||
known_packages | string | Windows | macOS | |
List of packages known to contain the executable. This list is not exhaustive: The presence of a package does not necessarily imply that on a given device the executable was installed through that package. | |||
last_seen | datetime | Windows | macOS | NU |
Last time activity of the executable was recorded on any device. | |||
name | string | Windows | macOS | |
Executable name | |||
platform | enum | Windows | macOS | |
The platform (operating system family) on which the executable is running. | |||
storage_policy | enum | Windows | macOS | |
Indicates the event storage policy for the executable. Possible values are:
| |||
total_active_days | day | Windows | macOS | |
Total number of days the executable was active. |
Last updated