Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
app_schemes
macOS application schemes and handlers (e.g., http, file, mailto).
Column | Type | Description |
---|---|---|
enabled | integer | 1 if this handler is the OS default, else 0 |
external | integer | 1 if this handler does NOT exist on macOS by default, else 0 |
handler | text | Application label for the handler |
protected | integer | 1 if this handler is protected (reserved) by macOS, else 0 |
scheme | text | Name of the scheme/protocol |
List applications that have registered the URL scheme "mailto" to handle email links.
SELECT * FROM app_schemes WHERE scheme='mailto';