--- apiVersion: v1 kind: pack spec: disabled: false name: convert_input queries: - description: Retrieves the list of application scheme/protocol-based IPC handlers. interval: 86400 name: app_schemes platform: darwin query: app_schemes version: 1.4.7 - description: Retrieves the current disk encryption status for the target system. interval: 86400 name: disk_encryption platform: posix query: disk_encryption version: 1.4.5 - description: Retrieves the current filters and chains per filter in the target system. interval: 3600 name: iptables platform: linux query: iptables version: 1.4.5 - description: Retrieves all the daemons that will run in the start of the target OSX system. interval: 3600 name: launchd platform: darwin query: launchd version: 1.4.5 - description: Lists the application bundle that owns a sandbox label. interval: 86400 name: sandboxes platform: darwin query: sandboxes version: 1.4.7 targets: labels: null teams: null --- apiVersion: v1 kind: query spec: description: Retrieves the list of application scheme/protocol-based IPC handlers. name: app_schemes query: select * from app_schemes; --- apiVersion: v1 kind: query spec: description: Retrieves the current disk encryption status for the target system. name: disk_encryption query: select * from disk_encryption; --- apiVersion: v1 kind: query spec: description: Retrieves the current filters and chains per filter in the target system. name: iptables query: select * from iptables; --- apiVersion: v1 kind: query spec: description: Retrieves all the daemons that will run in the start of the target OSX system. name: launchd query: select * from launchd; --- apiVersion: v1 kind: query spec: description: Lists the application bundle that owns a sandbox label. name: sandboxes query: select * from sandboxes;