Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Hi team. Any guidance on restricting the `orbit` Login Item from tampering in Ventura? To be more specific, I can control this through MDM but not sure what Identifier Type is best to use. I was going to take a stab at it with it Label Prefix: `com.fleetdm.orbit`

I will need to double check, but I think `com.fleetdm.orbit` is the correct bundle id

would love to know more about Ventura and the loginItems issue that you are facing

```&lt;dict&gt;
	&lt;key&gt;RuleType&lt;/key&gt;			
	&lt;string&gt;LabelPrefix&lt;/string&gt;
	&lt;key&gt;RuleValue&lt;/key&gt;
	&lt;string&gt;com.fleetdm.orbit&lt;/string&gt;
	&lt;key&gt;Comment&lt;/key&gt;
	&lt;string&gt;Fleet Orbit&lt;/string&gt;
&lt;/dict&gt;```

Hi <@U0F2G55TM> — Not an issue, just a change with VenturaOS. Users can see an manipulate launchagents and daemons, etc. You can specify which ones you want to mark as “managed” so they can’t be tampered with.

This is the Apple doc <https://support.apple.com/guide/deployment/use-mdm-to-manage-background-tasks-on-mac-depdca572563/web|https://support.apple.com/guide/deployment/use-mdm-to-manage-background-tasks-on-mac-depdca572563/web>