Title
#macos
Mystery Incorporated

Mystery Incorporated

09/17/2022, 9:40 AM
Hello in github releases there is osquery-macos-x86-64 and there is osqueryd-macos-bare what is the difference?
s

sharvil

09/17/2022, 1:43 PM
osqueryd-macos-bare just contains the
osqueryd
binary, while osquery-macos-x86-64 contains
osqueryd
inside the
<http://osquery.app|osquery.app>
app bundle -- certain functionality related to EndpointSecurity (
es_process_events
and
es_process_file_events
tables) requires the use of the app bundle
Mystery Incorporated

Mystery Incorporated

09/19/2022, 4:47 AM
Thanks @sharvil