CatalogLOOBins

ORCHARD · Tool

odutil

4 techniquesmacOSLOOBinsGPL-3.0

Listing the available node names

DiscoverymacOS

List all available node names

odutil show nodenames
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

Retrieves active session

DiscoverymacOS

Retrieves all active sessions

odutil show sessions
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

Retrieves "Default search policy"

DiscoverymacOS

Retrieves the configuration of "Default search policy"

odutil show configuration /Search
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

Retrieves "Contact search policy"

DiscoverymacOS

Retrieves the configuration of "Contact search policy"

odutil show configuration /Contacts
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing