Solutions
Device management
Remotely manage, and protect laptops and mobile devices.
Orchestration
Automate tasks across devices, from app installs to scripts.
Software management
Inventory, patch, and manage installed software.
Extend Fleet
Integrate your favorite tools with Fleet.
Customers
Stripe + Fleet
Stripe consolidates multiple tools with Fleet.
Foursquare + Fleet
Foursquare quickly migrates to Fleet for device management.
What people are saying
Stories from the Fleet community.
Pricing
More
Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
package_bom
package_bom
The "bill of materials" (.bom) file in a macOS installer package (.pkg) lists all files installed by the package. The package_bom osquery table collects the data from the .bom files created in /private/var/db/receipts by macOS when a .pkg file is executed.
| Column | Type | Description |
|---|---|---|
| filepath | text | Package file or directory |
| gid | integer | Expected group of file or directory |
| mode | integer | Expected permissions |
| modified_time | integer | Timestamp the file was installed |
| path | text | Path of package bom Required in WHERE clause |
| size | bigint | Expected file size |
| uid | integer | Expected user of file or directory |
Example
This query collects the filepath and time of installation for the libVFXCore.dylib (Dynamic Library) file installed as part of Xcode.app:
SELECT filepath,modified_time FROM package_bom WHERE path='/private/var/db/receipts/com.apple.pkg.Xcode.bom' AND filepath LIKE '%libVFXCore.dylib';Notes
Keeping track of files installed by applications is critical for upholding software management best security practices.
Apple’s installer package documentation
Questions?
SOC2 Type 2
