daily-query-library (#680)

Get mounts
This commit is contained in:
Mike Thomas 2021-04-26 13:55:31 +09:00 committed by GitHub
parent 6860dec81a
commit 1f6123fac1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 19 additions and 1 deletions

View File

@ -7,6 +7,7 @@ Fleet's standard query library includes a growing collection of useful queries f
- [Detect machines with gatekeeper disabled](./detect-machines-with-gatekeeper-disabled.md) (macOS)
- [Detect presence of authorized SSH keys](./detect-presence-of-authorized-ssh-keys.md) (macOS, Linux)
- [Detect hosts with the firewall disabled](./detect-hosts-with-the-firewall-disabled.md) (macOS)
- [Detect Linux hosts with high severity vulnerable versions of OpenSSL](./detect-hosts-with-high-severity-vulnerable-versions-of-openssl.md) (Linux)
- [Get installed Chrome extensions](./get-installed-chrome-extensions.md) (macOS, Linux, Windows, FreeBSD)
- [Get installed FreeBSD software](./get-installed-freebsd-software.md) (FreeBSD)
- [Get installed Homebrew packages](./get-installed-homebrew-packages.md) (macOS)
@ -23,6 +24,7 @@ Fleet's standard query library includes a growing collection of useful queries f
- [Get USB devices](./get-usb-devices.md) (macOS, Linux)
- [Count Apple applications installed](./count-apple-applications-installed.md) (macOS)
- [Get authorized keys](./get-authorized-keys.md) (macOS, Linux)
- [Get mounts](./get-mounts.md) (macOS, Linux)
### Contributors
@ -35,4 +37,4 @@ Please submit a pull request using the [Fleet standard query library template](.
Listed below are great resources that contain additional queries.
- Osquery (https://github.com/osquery/osquery/tree/master/packs)
- Palantir osquery configuration (https://github.com/palantir/osquery-configuration/tree/master/Fleet)
- Palantir osquery configuration (https://github.com/palantir/osquery-configuration/tree/master/Fleet)

View File

@ -0,0 +1,16 @@
# Get mounts
Shows system mounted devices and filesystems (not process specific).
### Support
macOS, Linux
### Query
```sql
SELECT device, device_alias, path, type, blocks_size FROM mounts;
```
### Purpose
Informational
### Remediation
N/A