https://github.com/osquery/osquery logo
Title
a

Avik Sengupta

02/14/2022, 3:35 PM
Anyone have a query/policy for checking that the OS updates are recent on every node? TIA!
w

wtheaker

02/14/2022, 7:24 PM
This isn't exactly what you want, but I was checking which devices have seen that latest macOS Monterey update with this:
SELECT p.key, p.value FROM plist AS p WHERE p.path like '/Users/%/Library/Preferences/com.apple.preferences.softwareupdate.plist' and p.key = 'ProductKeysLastSeenByUser' and p.value = 'MSU_UPDATE_21D62_patch_12.2.1';
a

Avik Sengupta

02/17/2022, 2:21 PM
Thanks for the tip. I should be able to get something going by reading these plists.