Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
macos_profiles
High level information on installed profiles enrollment.
Column | Type | Description |
---|---|---|
description | text | The description of the profile. |
display_name | text | The display name of the profile. |
identifier | text | The identifier of the profile. |
install_date | text | Date and time at which the profile was installed. |
organization | text | The profile's organization value. |
type | text | The type of profile. |
uuid | text | The UUID of the profile. |
verification_state | text | The verification state of the profile. |
Identify all profiles that are not verified.
SELECT display_name, install_date FROM macos_profiles WHERE verification_state!='verified';
This table is from the Mac Admins osquery extension.