https://github.com/osquery/osquery logo
#macos
Title
f

fritz

10/03/2022, 1:15 PM
Maybe I am misremembering, it is possible the simple syntax was never supported by
mdfind
and it was only in @groob’s
kolide_spotlight
table..., I can't find any changes since the initial introduction of
mdfind
that would have impacted it