Allister Banks

Scripts exist 'on the internet' for mass-generating rules formats for importing into various Santa servers or the local rules database. Considering the developers intended use of the product and their...

Proactively addressing a counter-point - I see how this could cause blind 'click to make it go away' alert fatigue-type reactions from customers, but the whole purpose for me, implementation-wise,...

Yes, with the difference from Windows-alike UAC prompts being that there probably shouldn't be auth mentioned in the alert or directly involved, just a one-time friendly speedbump notice. The decision...

As it says at the top of the readthedocs page on [Scopes](https://santa.dev/details/scopes.html), > Scopes are evaluated after rules, with block evaluation preceding allow Therefore the behavior you're experiencing is considered...

Seeing this convo is torment for the people who _don't_ work at Google and therefore don't even get push notifications 😅

😅

Hello! This doesn't look like a code issue exactly, more like usage question, have you consulted https://osquery.readthedocs.io/en/latest/ ? From what little I understand, when functional (meaning the appropriate lens is...

A 'learn' repo seems like a great place to point folks at the query hubs VMWare and Fleet and other folks have, and blog series and extensions and their notable...

To be explicit about 'storing the Mojave installer on an external volume, such as a dmg', here's a oneliner: `sudo hdiutil create -fs HFS+ -srcfolder /Applications/Install\ macOS\ Mojave.app /tmp/Install_macOS_10.14.3-18D42.dmg`

(as this came up again recently re: the DEP-only option of hidden user creation, thought I'd leave this here: https://support.apple.com/en-us/HT203998 as per @flammable)