fritz
10/03/2022, 1:12 PMmdfind
table but works still in victor's earlier launcher implementation `kolide_spotlight`:
osquery> SELECT COUNT(*) FROM kolide_spotlight WHERE query = "-name pip- info";
+----------+
| COUNT(*) |
+----------+
| 10 |
+----------+