osquery-defense-kit/incident_response/sandboxes.sql

9 lines
233 B
MySQL
Raw Normal View History

2022-10-13 13:11:17 +00:00
-- Lists the application bundle that owns a sandbox label.
--
-- interval: 86400
-- platform: darwin
-- value: Post-priori hijack detection, detect potential sensitive information leakage.
-- version: 1.4.7
select * from sandboxes;