Attention
Zercurity has been acquired by JumpCloud.
This documentation will no longer be maintained or updated. You can read more about the acquisition, or signup to JumpCloud today.
xprotect_entries¶
Database of the machine’s XProtect signatures.
Platform support¶
Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: xprotect_entries
- Mac OSX
Table schema¶
Name | Type | Description |
---|---|---|
name | TEXT | Description of XProtected malware |
launch_type | TEXT | Launch services content type |
identity | TEXT | XProtect identity (SHA1) of content |
filename | TEXT | Use this file name to match |
filetype | TEXT | Use this file type to match |
optional | INTEGER | Match any of the identities/patterns for this XProtect name |
uses_pattern | INTEGER | Uses a match pattern instead of identity |