or ``` select * from xprotect_entries;
+----------...
# generalh
henry (zentral)
10/26/2016, 8:54 AMor
Copy code
select * from xprotect_entries;
+-----------------+------------------------------+------------------------------+----------+------------------------+----------+--------------+
| name | launch_type | identity | filename | filetype | optional | uses_pattern |
+-----------------+------------------------------+------------------------------+----------+------------------------+----------+--------------+
| OSX.Netwire.A | public.data | | | public.data | 0 | 1 |
| OSX.Netwire.A | public.data | | | public.data | 0 | 1 |
| OSX.Bundlore.B | com.apple.application-bundle | | | public.unix-executable | 0 | 1 |
| OSX.Bundlore.B | com.apple.application-bundle | | | public.unix-executable | 0 | 1 |
| OSX.Bundlore.B | com.apple.application-bundle | | | public.unix-executable | 0 | 1 |
...
| OSX.Eleanor.A | com.apple.application-bundle | 3mQnUelrjFN0TwMab36SnVMiYyE= | | public.unix-executable | 1 | 0 |
| OSX.Eleanor.A | com.apple.application-bundle | H3guhN2/X9dkJvb5vz1CONLsmks= | | public.unix-executable | 1 | 0 |
| OSX.Hmining.A.2 | com.apple.application-bundle | | | public.unix-executable | 0 | 1 |
| OSX.Hmining.A.2 | com.apple.application-bundle | | | public.unix-executable | 0 | 1 |
| OSX.Trovi.A | com.apple.application-bundle | | | public.unix-executable | 0 | 1 |