Mystery Incorporated
09/17/2022, 9:40 AMsharvil
09/17/2022, 1:43 PMosqueryd binary, while osquery-macos-x86-64 contains osqueryd inside the <http://osquery.app|osquery.app> app bundle -- certain functionality related to EndpointSecurity (es_process_events and es_process_file_events tables) requires the use of the app bundleMystery Incorporated
09/19/2022, 4:47 AM