osquery/osquery

It'd be helpful to include updated login items path in startup items table for macOS

Closed this issue · 1 comments

Feature request

What new feature do you want?

As of macOS 10.13, login items are now stores in the backgrounditems.btm file, the existing table should be updated to include this.

How is this new feature useful?

This feature would allow this table to be used on more current versions of macOS.

How can this be implemented?

This can be implemented by adding the path to this file to the startup items table.

Hello @cacab, this issue is already being tracked by #5564.

The format of the file to parse seems to have changed, so contributions are welcome!
I'm going to close this to reduce duplicates.