Anyone have a query to see what applications have ...
# fleet
h
Anyone have a query to see what applications have access to specific privacy setting? For example, what applications have access to “Screen Recording”?
l
Hey Harrison! That is contained in the TCC database files (machine is in
/Library/Application\ Support/com.apple.TCC/TCC.db
and user settings in
/Users/username/Library/Application Support/com.apple.TCC/TCC.db
- you could use ATC (auto table construction) to parse it if your osquery agent has full disk access. Your mileage may vary on compatibility across macOS versions. Kolide had a really good post on this a few years ago: https://www.kolide.com/blog/macos-catalina-osquery
h
Ah yes! This is what I was looking for! Thanks heaps