environ#

$ target-query <path/to/target> -f environ
Details#

Module

os.unix.linux.environ.EnvironPlugin

Output

records

Module documentation

No documentation

Function documentation

Return the initial environment for all processes when they were started via execve(2).

If the process modified its environment (e.g., by calling functions such as putenv(3) or modifying the environ(7) variable directly), this plugin will not reflect those changes.

Yields EnvironmentVariableRecord with the following fields:

hostname (string): The target hostname. domain (string): The target domain. ts (datetime): The modification timestamp of the processes’ environ file. name (string): The name associated to the pid. pid (varint): The process id (pid) of the process. variable (string): The name of the environment variable. content (string): The contents of the environment variable.