Channels
doorman
zercurity
infrastructure
code-review
queryhub
apple-silicon
carving
goquery
aws
querycon
golang
file-carving
fuzzing
help-proxy
darkbytes
process-auditing
general
windows
random
fleet-dev
tls
fim
awallaby
zentral
zeek
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
community-feeds
Powered by
#general
Title
# general
b
Brandon Mesa
08/29/2022, 1:51 PM
Hey all, happy Monday. Is it possible to install the example osquery config profile found here manually?
https://osquery.readthedocs.io/en/stable/deployment/process-auditing/#full-disk-access
I'm trying to manually add it to my profiles via system preferences however the file is greyed out when it comes up on finder.
s
sharvil
08/29/2022, 2:30 PM
Hey
@Brandon Mesa
, as far as I know, I don’t think one can do that…the PPPC profile needs to be signed by one’s MDM server
b
Brandon Mesa
08/29/2022, 2:32 PM
Ah, good to know. Thank you, Sharvil!
s
seph
08/29/2022, 4:09 PM
You can grant osquery full disk access through the privacy control panel.
b
Brandon Mesa
08/29/2022, 4:12 PM
Yep, been doing so
@seph
. just wanted to play around with the profile install and vet what that looked like
Post