Skip to content

Commit

Permalink
Update query for Intel
Browse files Browse the repository at this point in the history
  • Loading branch information
spokanemac committed Jul 25, 2024
1 parent 18846fd commit 17e6f89
Showing 1 changed file with 15 additions and 10 deletions.
25 changes: 15 additions & 10 deletions it-and-security/lib/macos-intel.queries.yml
Original file line number Diff line number Diff line change
@@ -1,10 +1,15 @@
- name: Determine macOS cpu type as Intel
automations_enabled: false
description: Returns true if macOS cpu type is Intel.
discard_data: false
interval: 3600
logging: snapshot
min_osquery_version: ""
observer_can_run: true
platform: "darwin"
query: SELECT 1 FROM system_info WHERE cpu_type = "x86_64h";
apiVersion: v1
kind: query
spec:
name: query_apple_silicon
query: SELECT 1 FROM system_info WHERE cpu_type = "x86_64h";
# - name: Determine macOS cpu type as Intel
# automations_enabled: false
# description: Returns true if macOS cpu type is Intel.
# discard_data: false
# interval: 3600
# logging: snapshot
# min_osquery_version: ""
# observer_can_run: true
# platform: "darwin"
# query: SELECT 1 FROM system_info WHERE cpu_type = "x86_64h";

0 comments on commit 17e6f89

Please sign in to comment.