mirror of
https://github.com/empayre/fleet.git
synced 2024-11-06 08:55:24 +00:00
parent
6860dec81a
commit
1f6123fac1
@ -7,6 +7,7 @@ Fleet's standard query library includes a growing collection of useful queries f
|
||||
- [Detect machines with gatekeeper disabled](./detect-machines-with-gatekeeper-disabled.md) (macOS)
|
||||
- [Detect presence of authorized SSH keys](./detect-presence-of-authorized-ssh-keys.md) (macOS, Linux)
|
||||
- [Detect hosts with the firewall disabled](./detect-hosts-with-the-firewall-disabled.md) (macOS)
|
||||
- [Detect Linux hosts with high severity vulnerable versions of OpenSSL](./detect-hosts-with-high-severity-vulnerable-versions-of-openssl.md) (Linux)
|
||||
- [Get installed Chrome extensions](./get-installed-chrome-extensions.md) (macOS, Linux, Windows, FreeBSD)
|
||||
- [Get installed FreeBSD software](./get-installed-freebsd-software.md) (FreeBSD)
|
||||
- [Get installed Homebrew packages](./get-installed-homebrew-packages.md) (macOS)
|
||||
@ -23,6 +24,7 @@ Fleet's standard query library includes a growing collection of useful queries f
|
||||
- [Get USB devices](./get-usb-devices.md) (macOS, Linux)
|
||||
- [Count Apple applications installed](./count-apple-applications-installed.md) (macOS)
|
||||
- [Get authorized keys](./get-authorized-keys.md) (macOS, Linux)
|
||||
- [Get mounts](./get-mounts.md) (macOS, Linux)
|
||||
|
||||
### Contributors
|
||||
|
||||
@ -35,4 +37,4 @@ Please submit a pull request using the [Fleet standard query library template](.
|
||||
Listed below are great resources that contain additional queries.
|
||||
|
||||
- Osquery (https://github.com/osquery/osquery/tree/master/packs)
|
||||
- Palantir osquery configuration (https://github.com/palantir/osquery-configuration/tree/master/Fleet)
|
||||
- Palantir osquery configuration (https://github.com/palantir/osquery-configuration/tree/master/Fleet)
|
16
handbook/queries/get-mounts.md
Normal file
16
handbook/queries/get-mounts.md
Normal file
@ -0,0 +1,16 @@
|
||||
# Get mounts
|
||||
|
||||
Shows system mounted devices and filesystems (not process specific).
|
||||
|
||||
### Support
|
||||
macOS, Linux
|
||||
|
||||
### Query
|
||||
```sql
|
||||
SELECT device, device_alias, path, type, blocks_size FROM mounts;
|
||||
```
|
||||
### Purpose
|
||||
Informational
|
||||
|
||||
### Remediation
|
||||
N/A
|
Loading…
Reference in New Issue
Block a user