March 20th, 2026
New

We’ve added first-class UI support for running and reporting on OSQuery commands in Swif:
New OSQuery command templates – You can now create OSQuery-based command templates with a preconfigured, read‑only Execution type, so OSQuery commands are set up consistently across macOS, Windows, and Linux.
Execution type everywhere – The Execution type field now appears on OSQuery command templates, Command details, and the main Commands table, making it easier to see how a command runs at a glance.
Structured OSQuery command reports – OSQuery results (including the VS Code extensions example) are rendered as a readable, tabular report instead of raw text, with dynamic columns that adapt to the fields returned by your OSQuery.
Consistent entry points – The same OSQuery report can be opened either from:
Commands → Command details → Command report, or
Device details → Commands tab → View report,
and both views show identical data for the same command and device.
CSV export from Device details – From the Device details OSQuery Command report, you can download the results as a CSV file that mirrors the on‑screen table.
To learn more and see examples (including VS Code extensions), check out:

Run commands by script file or Git repo:
Run Commands by Script, OSQuery, File, or Git Repo | Help Center | Swif.ai
Run OSQuery commands and view VS Code extension reports:
Run OSQuery Commands -- View VS Code Extension Reports | Help Center | Swif.ai