Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
plist
Read and parse a plist file.
Column | Type | Description |
---|---|---|
key | text | Preference top-level key |
path | text | (required) read preferences from a plist Required in WHERE clause |
subkey | text | Intermediate key path, includes lists/dicts |
value | text | String value of most CF types |
Read the contents of a plist file, formatted into a table
SELECT key, subkey, value FROM plist WHERE path LIKE '/Users/%%/Library/Preferences/com.apple.Terminal.plist';