I've been looking into Apple's Endpoint Security F...
# fleet
p
I've been looking into Apple's Endpoint Security Framework (ESF) and I can't see any reference to it on Fleet website. Do you guys support ESF querying from FleetDM? Any plan to do so?
k
That is more of an Osquery question imo but yes Osquery has 2 tables for Endpoint security right now https://fleetdm.com/tables/es_process_file_events https://fleetdm.com/tables/es_process_file_events TrailofBits has a "Future Directions" section in this blog which provides some future direction
p
Thanks a lot!