Channels
Gavin
1 year agoAre system extensions queryable like kexts , I have not had a chance to dig deep into it but can’t see a table or relevant issue / pr on GitHub mainly due to the overloading of the name and currently on Linux
sundsta
1 year agokexts are in the kernel_extensions table https://osquery.io/schema/4.4.0#kernel_extensionsGavin
1 year agoTo be clear this is system extensions being query able like the kext table enables not the actual looking up of kextssundsta
1 year ago@Gavin Sorry, I misunderstood. I don’t think there’s any built in table for querying those at the moment, but if the configuration is stored in a plist somewhere you could parse that using the plist table.- f
fritz
1 year ago
Some enterprising individual should write a table 😉 Gavin
1 year ago#goodfirst issue ?
View count: 2