@henry (zentral), this is something we have been tracking in https://github.com/facebook/osquery/issues/2487, but as of now, Apple is not providing any public API to access these new logs. I don't think anyone is actively working on this issue, and I don't have the time to do so currently.\