osquery-defense-kit/incident_response/xprotect_reports.sql

9 lines
136 B
SQL

-- Returns a list of malware matches from macOS XProtect
--
-- tags: postmortem
-- platform: darwin
SELECT
*
FROM
xprotect_reports;