From 3c835ec1e3484b58d9873740fe4ae2315dbb90f1 Mon Sep 17 00:00:00 2001 From: Katheryn Satterlee Date: Wed, 22 Feb 2023 11:39:29 -0600 Subject: [PATCH] Expand description of min_version (#9881) Documentation only change - expanded description of `min_version`column in the `xprotect_meta` table to include an explanation of `any`. Resolves #9545 --- schema/tables/xprotect_meta.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/schema/tables/xprotect_meta.yml b/schema/tables/xprotect_meta.yml index 9dcd7f41fd..08ba9f108f 100644 --- a/schema/tables/xprotect_meta.yml +++ b/schema/tables/xprotect_meta.yml @@ -3,7 +3,10 @@ description: "This Mac's browser-related [XProtect](https://support.apple.com/en columns: - name: identifier description: "Browser extension or plugin [identifier](https://fleetdm.com/tables/safari_extensions)" -examples: >- + - name: min_version + description: "The minimum allowed plugin version, or 'any' if no version is allowed." + + examples: >- See the minimum version of specific components allowed by Xprotect. This usually means the previous versions have vulnerabilities that are being exploited at scale, or were exploited at scale at some point in time.