osquery-defense-kit/incident_response/authorization_mechanisms-ma...

9 lines
151 B
SQL

-- Retrieves entries from the macOS authorization mechanisms db
--
-- tags: postmortem
-- platform: darwin
SELECT
*
FROM
authorization_mechanisms;