Retrieves all the hardware related events in the target OSX system.: Determine if a third party device was attached to the system.
Query:
select * from hardware_events where path '' or model '';Additional Query Info:
Version: 1.4.5
Platform: posix
Interval: 7200
JSON:
{ "queries": { "hardware_events": { "query" : "select * from hardware_events where path '' or model '';", "interval" : "7200", "platform" : "posix", "version": "1.4.5", "description" : "Retrieves all the hardware related events in the target OSX system.", "value" : "Determine if a third party device was attached to the system." } } }