Report on Apple/OS X XProtect 'report' generation. Reports are generated when OS X matches an item in xprotect_entries.: Although XProtect reports are rare, they may be worth collecting and aggregating internally.
Query:
select * from xprotect_reports;Additional Query Info:
Version: 1.4.5
Platform: darwin
Interval: 1200
JSON:
{ "queries": { "xprotect_reports": { "query" : "select * from xprotect_reports;", "interval" : "1200", "platform" : "darwin", "version": "1.4.5", "description" : "Report on Apple/OS X XProtect 'report' generation. Reports are generated when OS X matches an item in xprotect_entries.", "value" : "Although XProtect reports are rare, they may be worth collecting and aggregating internally." } } }