The derq command queries DER encoded entitlements using the CoreEntitlements library. It currently supports querying from a Mach-O, file / input stream, as well as directly from a process using csops. After a succesful execution of the query statements on the input , derq will output the active DER context to the output.