https://github.com/osquery/osquery logo
#macos
Title
# macos
a

Anuj Kharbanda

04/03/2023, 9:32 AM
Hi Team, I want to understand the significance of the column
last_opened_time
in the
apps
table. What does the word "opened" signifies here, like the time app was launched or the time it was last used ? The results signifies the former (time when app was launched) for most cases, but it seems to be inconsistent sometimes. For some apps running for a longer duration of time, the last_opened_time seems to be changing even though the app was running for the whole time before that. And this value is not equivalent to the last accessed/used time either.