Return macOS package receipts

Query · osquery

Copy query View raw source osquery SQL

-- Return macOS package receipts
--
-- tags: postmortem
SELECT
  *
FROM
  package_receipts;