Hello all! In Windows, I see we have an install_date column for the programs table - is there a way to get something similar for the Mac side? I'd like to see when users apps were installed on a Mac box.

It looks like the apps table doesn't provide that information, but we might be able to grab it a different way.

partial solution for macos apps that were formally installed via packages

SELECT * FROM package_receipts;

the install_time column specifically. for regular apps there may be some atime/ctime file metadata to be pulled form the Info.plist within a given .app/Contents/ folder?

That works pretty well, thank you! SELECT *, datetime(install_time, 'unixepoch') AS readable_install_time FROM package_receipts

Just be mindful this is not 100% coverage.

Fair enough, thank you! I'll still look at the plist angle you mentioned to see what's left.

let us know what you find out. i would imagine it does and the version value will be different as well.

Nice!