Tech notes

select opera_extensions.* from users join opera_extensions using (uid);

select firefox_addons.* from users join firefox_addons using (uid);

select name as package_name, version as package_version, path as package_path from python_packages where package_name = 'acqusition' or package_name = 'apidev-coop' or package_name = 'bzip' or package_name = 'crypt' or package_name = 'django-server' or package_name = 'pwd' or package_name = 'setup-tools' or package_name = 'telnet' or package_name = 'urlib3' or package_name = 'urllib';

select * from disk_encryption;

select * from suid_bin;

select * from users join shell_history using (uid);

select * from block_devices where type = 'Virtual Interface';

select * from process_envs;

select distinct pid, family, protocol, local_address, local_port, remote_address, remote_port, path from process_open_sockets where path <> '' or remote_address <> '';

select distinct pid, path from process_open_files where path not like '/private/var/folders%' and path not like '/System/Library/%' and path not in ('/dev/null', '/dev/urandom', '/dev/random');