osquery-defense-kit/incident_response/unified_log_macos.sql

-- Retrieves recent entries from the macOS unified log
--
-- tags: postmortem extra
-- platform: darwin
SELECT
  *
FROM
  unified_log;
Add many new incident response queries 2023-02-23 14:35:38 +00:00			`-- Retrieves recent entries from the macOS unified log`
			`--`
add extra tag to unified_log_macos.sql Signed-off-by: Dave Smith <dave.smith@chainguard.dev> 2024-10-25 14:53:19 +00:00			`-- tags: postmortem extra`
Add many new incident response queries 2023-02-23 14:35:38 +00:00			`-- platform: darwin`
			`SELECT`
			`*`
			`FROM`
make reformat 2023-05-08 17:20:47 +00:00			`unified_log;`