https://github.com/osquery/osquery logo
Title
j

Jacob Pope

04/12/2023, 5:49 PM
Hey All! Does anyone know of a way to list apps that have been granted Full Disk Access permission on MacOS?
s

seph

04/13/2023, 10:33 AM
You need to read the TCC data. This can be done through an ATC table. We (kolide) gather this, we might have a blog post about it. (I’m mobile and can’t lookup info, but maybe this is enough of a hint)