March 20th, 2026

New

OSQuery command templates and reports

We’ve added first-class UI support for running and reporting on OSQuery commands in Swif:

  • New OSQuery command templates – You can now create OSQuery-based command templates with a preconfigured, read‑only Execution type, so OSQuery commands are set up consistently across macOS, Windows, and Linux.

  • Execution type everywhere – The Execution type field now appears on OSQuery command templates, Command details, and the main Commands table, making it easier to see how a command runs at a glance.

  • Structured OSQuery command reports – OSQuery results (including the VS Code extensions example) are rendered as a readable, tabular report instead of raw text, with dynamic columns that adapt to the fields returned by your OSQuery.

  • Consistent entry points – The same OSQuery report can be opened either from:

    • Commands → Command details → Command report, or

    • Device details → Commands tab → View report,
      and both views show identical data for the same command and device.

  • CSV export from Device details – From the Device details OSQuery Command report, you can download the results as a CSV file that mirrors the on‑screen table.

To learn more and see examples (including VS Code extensions), check out: