Darwin Kernel System Controls

OSquery

Double check the information reported in kernel_info and report the kernel signature.:

Query

select * from system_controls where subsystem = 'kern' and (name like '%boot%' or name like '%secure%' or name like '%single%');

Additional Query Info

  • Version: 1.4.3
  • Platform: darwin
  • Interval: 7200

JSON

{
  "queries": {
    "Darwin Kernel System Controls": {
      "query": "select * from system_controls where subsystem = 'kern' and (name like '%boot%' or name like '%secure%' or name like '%single%');",
      "interval": "7200",
      "platform": "darwin",
      "version": "1.4.3",
      "description": "Double check the information reported in kernel_info and report the kernel signature.",
      "value": ""
    }
  }
}