```osquery> SELECT key, subkey, value FROM plis...
# macosf
fritz
06/11/2020, 1:20 AM Copy code
osquery> SELECT key, subkey, value FROM plist WHERE path LIKE '/Users/%/Library/Containers/com.apple.Safari/Data/Library/Preferences/com.apple.Safari.plist' AND key = 'AppExtensionToolbarItemsIndexes';
+---------------------------------+-------------------------------------------------------------------------------+-------+
| key | subkey | value |
+---------------------------------+-------------------------------------------------------------------------------+-------+
| AppExtensionToolbarItemsIndexes | com.agilebits.onepassword7.1PasswordSafariAppExtension (2BUA8C4S2C) Button | 3 |
| AppExtensionToolbarItemsIndexes | com.duckduckgo.macos.PrivacyEssentials.SafariAppExtension (HKE973VLUW) Button | 4 |
+---------------------------------+-------------------------------------------------------------------------------+-------+2 Views