This view is available with Lacework data share v.1, v.2, v.3, or v.4.
This view provides raw historic data about command line invocations.
Lacework regularly monitors for command line invocations in your environment across machines and returns a row in the CMDLINE_V view when Lacework detects a command line invocation.
Each row contains command line information as listed in the columns.
Column Name | Data Type | Description |
---|---|---|
CREATED_TIME | Timestamp | The time and date when the command line was detected by Lacework. |
CMDLINE_HASH | Text | The hash generated by hashing the command line name. |
CMDLINE | Text | The name of the command line executable. |