Hey there osqueryd is listed as a conflicting app by Microso

Question

Hey there osqueryd is listed as a conflicting app by Microsoft Defender for Endpoint

sharvil · Answer

Probably because Microsoft Defender on macOS itself embeds osquery

Mystery Incorporated · Answer

Oh rly

sharvil · Answer

Yes It s not widely known but they do

Mystery Incorporated · Answer

what s my options in this case

sharvil · Answer

Look at their app package structure

sharvil · Answer

gt what s my options in this case Also not sure why microsoft would do this not sure off the top of my head

Mystery Incorporated · Answer

I assume I can t configure their copy to talk to fleet

sharvil · Answer

worth a try lol do report back I don t have a copy of Microsoft Defender for mac anymore

Mystery Incorporated · Answer

ok i ll have a look

Mystery Incorporated · Answer

< sharvil> hmm not seeing it unless they rename it

sharvil · Answer

I am not sure about now but they definitely did embed it a while back

marnin · Answer

I see `Microsoft <http Defender app Contents MacOS wdavdaemon enterprise app Contents Frameworks osqueryi|Defender app Contents MacOS wdavdaemon enterprise app Contents Frameworks osqueryi>`

sharvil · Answer

Yep I confirmed it s there