Can osquery report on files that have been sent/re...
# macos
l
Can osquery report on files that have been sent/received via airdrop? Commands like
Copy code
# Find received files
mdfind '( kMDItemUserSharedReceivedTransport = "com.apple.AirDrop" )'

# Find sent files
mdfind '( kMDItemUserSharedSentTransport = "com.apple.AirDrop" )'
will find the files and
Copy code
mdls
will display the metadata of those files. Can osquery report anything similar as it relates to AirDrop files?