What about non application things like libraries, printer drivers or browser plug-ins? And can you elaborate a little on "use a metadata query and launch services to locate the apps"? Perhaps there are other OS X capabilities that OVAL should make available to system auditors. - Jasen. From: Josh Wisenbaker <dubs@apple.com<mailto:dubs@apple.com>> Date: Friday, July 12, 2013 11:44 AM To: Shane Shaffer <shane.shaffer@g2-inc.com<mailto:shane.shaffer@g2-inc.com>> Cc: MITRE Employee <jasenj1@mitre.org<mailto:jasenj1@mitre.org>>, oval-developer-list OVAL Developer List/Closed Public Discussion <oval-developer-list@lists.mitre.org<mailto:oval-developer-list@lists.mitre.org>>, "scap-on-apple@lists.macosforge.org<mailto:scap-on-apple@lists.macosforge.org>" <scap-on-apple@lists.macosforge.org<mailto:scap-on-apple@lists.macosforge.org>>, "scap-on-apple-dev@lists.macosforge.org<mailto:scap-on-apple-dev@lists.macosforge.org>" <scap-on-apple-dev@lists.macosforge.org<mailto:scap-on-apple-dev@lists.macosforge.org>> Subject: Re: [SCAP-On-Apple-Dev] [SCAP-On-Apple] Mac OS X proposed pkginfo OVAL Test. As for finding installed applications I’ve always found the best option is to use a metadata query and launch services to locate the apps, and then simply read the Info.plist from the bundle to get the version. You could then compare this to the installer DB to find any missing software that was claiming to be installed.