Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Haven't tested this myself, but heads up <https://developer.apple.com/documentation/macos-release-notes/macos-15-release-notes#Application-Firewall|this deprecation> sounds like it will affect osquery's firewall tables in macOS 15 (<https://osquery.io/schema/current#alf|alf>, <https://osquery.io/schema/current#alf_exceptions|alf_exceptions>, <https://osquery.io/schema/current#alf_explicit_auths|alf_explicit_auths>)

Does this change relate to that? <https://github.com/osquery/osquery/issues/8352|https://github.com/osquery/osquery/issues/8352>

Oh probably, hopefully that keeps it working for macOS 15!