fleet/handbook/queries/detect-machines-with-gatekeeper-disabled.md
noahtalerman 650db555fd
Add 6 queries to the handbook (#459)
This PR includes 6 potentially useful queries.
2021-03-12 12:34:26 -08:00

263 B

Detect machines with Gatekeeper disabled

Gatekeeper tries to ensure only trusted software is run on a mac machine.

Platforms

macOS

Query

SELECT * FROM gatekeeper WHERE assessments_enabled = 0;

Purpose

Detection

Remediation

TODO