Hey there osqueryd is listed as a conflicting app by Microsoft Defender for Endpoint

Probably because Microsoft Defender on macOS itself embeds osquery..

Oh rly?

Yes! It's not widely known, but they do

what's my options in this case?

Look at their .app package structure

I assume I can't configure their copy to talk to fleet

worth a try lol, do report back -- I don't have a copy of Microsoft Defender for mac anymore

ok i'll have a look

I am not sure about now, but they definitely did embed it a while back

I see

Microsoft\ <http://Defender.app/Contents/MacOS/wdavdaemon_enterprise.app/Contents/Frameworks/osqueryi|Defender.app/Contents/MacOS/wdavdaemon_enterprise.app/Contents/Frameworks/osqueryi>

Yep, I confirmed it's there