mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2025-02-27 15:30:24 +00:00
13 lines
244 B
SQL
13 lines
244 B
SQL
-- Display a list of non-Apple kernel extensions, which are exceedingly rare.
|
|
-- platform: darwin
|
|
SELECT
|
|
*
|
|
FROM
|
|
kernel_extensions
|
|
WHERE
|
|
path NOT LIKE '/System/Library/Extensions/%'
|
|
AND NOT (
|
|
idx = 0
|
|
AND name = '__kernel__'
|
|
);
|