Announcing osquery 5: Now with EndpointSecurity on macOS

Published

2021-11-10 06:05

Collected

2026-07-03 04:10

---
id: 1805
title: "Announcing osquery 5: Now with EndpointSecurity on macOS"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2021/11/10/announcing-osquery-5-now-with-endpointsecurity-on-macos/"
published_at: "2021-11-10T06:05:55Z"
tags: ["open-source", "endpoint-security", "macos", "release", "visibility", "osquery"]
phying_url: "https://phying.com/item/1805"
lang: en
---

# Announcing osquery 5: Now with EndpointSecurity on macOS

## Summary

osquery 5.0.1 introduces an EndpointSecurity-based process events table for macOS, adapting to Apple's tightened security rules, with a mini tutorial and migration notes from 4.x.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2021-11-10T06:05:55Z
- **Original:** https://blog.trailofbits.com/2021/11/10/announcing-osquery-5-now-with-endpointsecurity-on-macos/
- **Phying News:** https://phying.com/item/1805