https://github.com/osquery/osquery logo
#macos
Title
f

fritz

10/03/2022, 1:01 PM
@allister it appears the infix
*
is contributing to the problem, you could maybe overcome this with an `&&`'ed argument:
Copy code
SELECT * FROM mdfind WHERE query = "kMDItemFSName == '*pip*'c && kMDItemFSName == '*info'c";