Solutions
Device management
Remotely manage, and protect laptops and mobile devices.
Orchestration
Automate tasks across devices, from app installs to scripts.
Software management
Inventory, patch, and manage installed software.
Infrastructure as code
See every change, undo any error, repeat every success.
Extend Fleet
Integrate your favorite tools with Fleet.
Customers
Pricing
More
Device management
Remotely manage, and protect laptops and mobile devices.
Orchestration
Automate tasks across devices, from app installs to scripts.
Software management
Inventory, patch, and manage installed software.
Infrastructure as code
See every change, undo any error, repeat every success.
Extend Fleet
Integrate your favorite tools with Fleet.
Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
xprotect_entries
xprotect_entries
Database of the machine's XProtect signatures.
| Column | Type | Description |
|---|---|---|
| filename | text | Use this file name to match |
| filetype | text | Use this file type to match |
| identity | text | XProtect identity (SHA1) of content |
| launch_type | text | Launch services content type |
| name | text | Description of XProtected malware |
| optional | integer | Match any of the identities/patterns for this XProtect name |
| uses_pattern | integer | Uses a match pattern instead of identity |
Example
Identify the Bundlore variants Xprotect protects the computer from
SELECT * FROM xprotect_entries WHERE name LIKE 'OSX.Bundlore%';Questions?
SOC2 Type 2
