osquery-defense-kit/incident_response/installed_applications.sql
Thomas Stromberg e785c35614
v0.0.1
2022-10-13 09:11:17 -04:00

9 lines
257 B
SQL

-- Retrieves all the currently installed applications in the target OSX system.
--
-- interval: 3600
-- platform: darwin
-- value: Identify malware, adware, or vulnerable packages that are installed as an application.
-- version: 1.4.5
select * from apps;