diff --git a/schema/tables/screenlock.yml b/schema/tables/screenlock.yml new file mode 100644 index 0000000000..73677b8004 --- /dev/null +++ b/schema/tables/screenlock.yml @@ -0,0 +1,7 @@ +name: screenlock +description: >- + macOS screenlock status +notes: >- + - Only fetches results for osquery's current logged-in user context. If osquery is running as root, this table will return no results. + + - The user must also have recently logged in in order to show the latest setting.