Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

I noticed M1's are shipping without osquery able to make proper detection, so I bumped <@U7QP20JQH>'s issue with some background/random observations

<https://github.com/osquery/osquery/issues/6517|6517> for those playing along at home

I've been detecting M1 machines off the model name. I don't trust the emulated cpu type 

We also found that system profiler had useful into (even before the m1). In the launcher repo there's a table that execs it and returns the info

we’re using MDM but also reading the model name. because apple in their wisdom did not add an architecture parameter anywhere in MDM &gt;.&lt;