osquery-defense-kit/incident_response/disk_events_macos.sql

9 lines
118 B
MySQL
Raw Permalink Normal View History

2023-02-23 14:35:38 +00:00
-- Retrieves disk image (DMG) events
--
-- tags: postmortem events
2023-02-23 14:35:38 +00:00
-- platform: darwin
SELECT
*
FROM
disk_events;