@lvferdi we have a

spotlight

table that we add through the Kolide Launcher extension where you could enter a query like that: https://github.com/kolide/launcher/blob/master/osquery/mdfind.go#L13-L19