Channels
doorman
infrastructure
random
zercurity
community-feeds
fleet-dev
code-review
queryhub
apple-silicon
carving
tls
fim
goquery
zentral
aws
querycon
golang
zeek
file-carving
fuzzing
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
darkbytes
process-auditing
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
general
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
windows
Powered by
Title
b
Brandon Mesa
08/29/2022, 1:51 PM
Hey all, happy Monday. Is it possible to install the example osquery config profile found here manually?
https://osquery.readthedocs.io/en/stable/deployment/process-auditing/#full-disk-access
I'm trying to manually add it to my profiles via system preferences however the file is greyed out when it comes up on finder.
s
sharvil
08/29/2022, 2:30 PM
Hey
@Brandon Mesa
, as far as I know, I don’t think one can do that…the PPPC profile needs to be signed by one’s MDM server
b
Brandon Mesa
08/29/2022, 2:32 PM
Ah, good to know. Thank you, Sharvil!
s
seph
08/29/2022, 4:09 PM
You can grant osquery full disk access through the privacy control panel.
b
Brandon Mesa
08/29/2022, 4:12 PM
Yep, been doing so
@seph
. just wanted to play around with the profile install and vet what that looked like
#general
Join Slack