Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Hello all, does anyone know what table I can use to get more information on Apple Silicon boot process? for intel I'm using the platform_info table however it appears the booting process for silicon chips is independent of EFI/BIOS/etc. when i run `SELECT * FROM platform_info;` on M1 host, i get no results

hey Brandon! We have a PR here: <https://github.com/osquery/osquery/pull/7660> from <@U031YNEMWKH>

Ah, thanks <@U6EFFT5FG>. Should have double checked outstanding PRs!

Could you give us some feedback on it if you get a chance to try it out? :smile:

We have the test packages from the CI:<https://github.com/osquery/osquery/actions/runs/2572409709>

The universal binary is here: <https://github.com/osquery/osquery/suites/7116276558/artifacts/282743752>

Tried it out, observing the same behavior, no results returned from platform_info

We'll take a second look at the PR, thanks so much for the help!

Can you share the macbook model this was tested on?

let me know if you need additional info
```% system_profiler SPHardwareDataType
Hardware:

    Hardware Overview:

      Model Name: MacBook Pro
      Model Identifier: MacBookPro17,1
      Chip: Apple M1
      Total Number of Cores: 8 (4 performance and 4 efficiency)
      Memory: 16 GB
      System Firmware Version: 7459.101.3
      OS Loader Version: 7459.101.3```

```% system_profiler SPSoftwareDataType
Software:

    System Software Overview:

      System Version: macOS 12.3.1 (21E258)
      Kernel Version: Darwin 21.4.0
      Boot Volume: Macintosh HD
      Boot Mode: Normal
      Secure Virtual Memory: Enabled
      System Integrity Protection: Enabled
      Time since boot: 15 days 16:26```

<@U03E2DL4PUN> Hello, I’m trying to reproduce the problem you are having, and I was wondering if IOKit puts the information on your M1 mac in a different place. Would you be able to share the output of `ioreg -p IODeviceTree -l -t` with me? Thanks!