osQuery Management Server (Policy).Full disk encryption enabled (Macos) (SQLite SQL Statements)
SELECT
CASE
WHEN EXISTS (
SELECT 1
FROM disk_encryption
WHERE user_uuid IS NOT '' AND filevault_status = 'on'
LIMIT 1
) THEN 'true'
ELSE 'false'
END AS policy_result;