-- Retrieves disk image (DMG) events
--
-- tags: postmortem
-- platform: darwin
SELECT
  *
FROM
  authorizations;