osquery-defense-kit/incident_response/disk_events_macos.sql
2023-02-23 21:24:52 -05:00

9 lines
111 B
SQL

-- Retrieves disk image (DMG) events
--
-- tags: postmortem
-- platform: darwin
SELECT
*
FROM
disk_events;