diff --git a/osquery/events/darwin/es_utils.cpp b/osquery/events/darwin/es_utils.cpp index 2d3afc38e32..231cf40b2a0 100644 --- a/osquery/events/darwin/es_utils.cpp +++ b/osquery/events/darwin/es_utils.cpp @@ -162,12 +162,4 @@ void getProcessProperties(const es_process_t* p, ec->cwd = getCwdPathFromPid(ec->pid); } -void appendQuotedString(std::ostream& out, std::string s, char delim) { - if (s.find(delim) != std::string::npos || s.find('"') != std::string::npos) { - out << std::quoted(s) << delim; - } else { - out << s << delim; - } -} - } // namespace osquery diff --git a/osquery/tables/system/darwin/homebrew_packages.cpp b/osquery/tables/system/darwin/homebrew_packages.cpp index e57dfc4b305..2f270e1e3c3 100644 --- a/osquery/tables/system/darwin/homebrew_packages.cpp +++ b/osquery/tables/system/darwin/homebrew_packages.cpp @@ -38,6 +38,8 @@ const std::set kHomebrewPrefixes = { "/opt/homebrew", }; +namespace { + std::vector getHomebrewAppInfoPlistPaths(const std::string& root) { std::vector results; auto status = osquery::listDirectoriesInDirectory(root, results); @@ -338,6 +340,8 @@ void packagesFromPrefix(QueryData& results, computeVersionsForCasks(results, prefix, userRequested); } +} // namespace + QueryData genHomebrewPackages(QueryContext& context) { QueryData results; diff --git a/osquery/tables/system/windows/shimcache.cpp b/osquery/tables/system/windows/shimcache.cpp index 8e6feeb14d6..b83c37741d4 100644 --- a/osquery/tables/system/windows/shimcache.cpp +++ b/osquery/tables/system/windows/shimcache.cpp @@ -22,6 +22,11 @@ #include #include +namespace osquery { +namespace tables { + +namespace { + const int kWin8 = 256; const int kWin10PreCreator = 96; const int kWin10Creator = 104; @@ -44,8 +49,7 @@ struct ShimcacheData { boost::optional execution_flag; }; -namespace osquery { -namespace tables { +} // namespace auto parseShimcacheData(const std::string& token, const boost::optional& execution_flag_exists) { @@ -227,3 +231,4 @@ QueryData genShimcache(QueryContext& context) { } // namespace tables } // namespace osquery +