mdfind¶
Run searches against the spotlight database.
Platform support¶
Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: mdfind
- Mac OSX
Table schema¶
Name | Type | Description |
---|---|---|
path | TEXT | Path of the file returned from spotlight |
query | TEXT | The query that was run to find the file |
Query examples¶
select count(*) from mdfind where query = 'kMDItemTextContent == "osquery"';select * from mdfind where query = 'kMDItemDisplayName == "rook.stl"';
select * from mdfind where query in ('kMDItemDisplayName == "rook.stl"', 'kMDItemDisplayName == "video.mp4"')