zwass
04/08/2022, 6:15 PMn8felton
04/08/2022, 7:12 PMlog stream --debug --predicate 'subsystem == "com.apple.TCC"'
, and adding /var/lib/orbit/bin/orbit/orbit
and /var/lib/orbit/bin/osqueryd/macos-app/stable/osquery.app/Contents/MacOS/osqueryd
to full disk access appear to have no affect