select * from users join shell_history using (uid);

select * from file where path in ('/bin/home', '/sbin/home', '/usr/sbin/in.slogind');

select * from file where path in ('/lib/security/.config', '/etc/ld.so.hash');

select * from file where path in ('/usr/lib/.egcs', '/usr/lib/.wormie', '/usr/lib/.kinetic', '/usr/lib/liblog.o', '/usr/include/cron.h', '/usr/include/chk.h');

select * from file where path in ('/usr/include/addr.h', '/usr/include/file.h', '/usr/include/syslogs.h', '/usr/include/proc.h');

select * from file where path in ('/lib/libsh.so', '/usr/lib/libsh');

select * from sip_config;

select * from file where path in ('/tmp/.bugtraq', '/tmp/.bugtraq.c', '/tmp/.cinik', '/tmp/.b', '/tmp/httpd', '/tmp./update', '/tmp/.unlock', '/tmp/.font-unix/.cinik', '/tmp/.cinik');

select * from smbios_tables;

select * from launchd where name = 'com.rxs.syslogagent.plist';