Return macOS package install history

Query · osquery

Copy query View raw source osquery SQL

-- Return macOS package install history
--
-- tags: postmortem
SELECT
  *
FROM
  package_install_history;