Join Slack
Powered by
`/Library/SystemExtensions/db.plist` has all the r...
# macos
g
groob
01/27/2022, 4:14 PM
/Library/SystemExtensions/db.plist
has all the relevant bits. I'm thinking i can turn that into a table on macadmins/osquery-extensions
👍 1
s
sharvil
01/27/2022, 4:56 PM
There is a
system_extensions
table too -- we could also expand that
g
groob
01/27/2022, 4:58 PM
duh!
https://github.com/osquery/osquery/blob/master/osquery/tables/system/darwin/system_extensions.mm#L29
groob
01/27/2022, 4:58 PM
i've been gone for too long
groob
01/27/2022, 4:59 PM
the table has all the relevant fields
👌 1
metal
1
6
Views
Open in Slack
Previous
Next