osQuery Management Server (Prime).Osquery Admin Application Processes (SQLite SQL Statements)


          SELECT 
            p.pid, 
            p.name, 
            u.username, 
            p.path 
          FROM processes p
          JOIN users u ON p.uid = u.uid
          WHERE 
            (p.name LIKE 'nginx%' OR p.name LIKE 'apache%' OR p.name LIKE 'postgres%' OR p.name LIKE 'mysqld%')
            AND (u.username LIKE 'root%' OR u.username LIKE 'admin%' OR u.username LIKE '%sudo%');