Hey everyone, I wrote a blog for people looking to build their first osquery table. In the post I create a new table that doesn’t currently exist in osquery for macOS. If there is a better channel to post this in, please let me know!
https://www.kolide.com/blog/how-to-write-a-new-osquery-table