Title
#macos
CptOfEvilMinions

CptOfEvilMinions

03/01/2021, 5:31 PM
Is there a way to query a list of system extensions?
zwass

zwass

03/01/2021, 5:32 PM
kernel_extensions
?
CptOfEvilMinions

CptOfEvilMinions

03/01/2021, 5:34 PM
No, I am specifically looking for applications that are using the new Apple security framework. I found this PR: https://github.com/osquery/osquery/pull/6863
5:35 PM
It looks like the PR was merged into MAIN but I have to wait for the next Osquery release
zwass

zwass

03/01/2021, 5:37 PM
Got it, looks like that PR ought to do what you're looking for.
f

fritz

03/01/2021, 5:45 PM
@CptOfEvilMinions Because it is a plist you should be able to query it using
plist
CptOfEvilMinions

CptOfEvilMinions

03/01/2021, 5:46 PM
@fritz that worked!
f

fritz

03/01/2021, 5:46 PM
👍
5:46 PM
Happy to hear it