Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-24 01:18:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 59

Format SQL query for readability (#37753)

Browse source 
Sorry for having so many PRs on this one!

Thank you again for correcting my original formatting. I was looking
over this more and wanted to improve how it appears on the site for
better readability.
This commit is contained in:
Steven Palmesano 2026-01-05 10:53:28 -06:00 committed by GitHub
parent d94bcb81b5
commit aa56063553
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
docs/01-Using-Fleet/standard-query-library/standard-query-library.yml
View file

@ -2149,9 +2149,15 @@ kind: policy
spec:
name: CrowdStrike Falcon System Extension enabled and activated (macOS)
query: |
SELECT 1
WHERE (EXISTS (SELECT 1 FROM system_extensions WHERE identifier = 'com.crowdstrike.falcon.Agent'))
AND EXISTS (SELECT 1 FROM system_extensions WHERE state = 'activated_enabled');
SELECT 1
WHERE EXISTS (
SELECT 1 FROM system_extensions
WHERE identifier = 'com.crowdstrike.falcon.Agent'
)
AND EXISTS (
SELECT 1 FROM system_extensions
WHERE state = 'activated_enabled'
);
bash: systemextensionsctl list | grep 'falcon' | grep 'activated enabled'
description: Checks to make sure that the CrowdStrike System Extension is enabled and activated on macOS devices.
resolution: "To activate the CrowdStrike Falcon System Extension, on the failing device, run the following command in the Terminal app: sudo /Applications/Falcon.app/Contents/Resources/falconctl load"