osquery-1/specs/posix/disk_encryption.table

table_name("disk_encryption")
description("Disk encryption status and information.")
schema([
    Column("name", TEXT, "Disk name"),
    Column("uuid", TEXT, "Disk Universally Unique Identifier"),
    Column("encrypted", INTEGER, "1 If encrypted: true (disk is encrypted), else 0"),
    Column("type", TEXT, "Description of cipher type and mode if available"),
    Column("uid", TEXT, "Currently authenticated user if available (Apple)"),
    Column("user_uuid", TEXT, "UUID of authenticated user if available (Apple)"),
    Column("encryption_status", TEXT, "Disk encryption status with one of following values: encrypted | not encrypted | undefined"),
    ForeignKey(column="name", table="block_devices"),
    ForeignKey(column="uuid", table="block_devices"),
])
implementation("disk_encryption@genFDEStatus")
add encrypted column to block_devices table and implement is_encrypted on each block device (OS X) by querying IORegistry properly query IORegistry remove fde_status implementation from block_devices scaffolding for disk_encryption table add disk_encryption table schema implement disk_enryption table for OS X clang-format the source add newline at the end of disk_encryption.table add device prefix to the bsd_name provide link to apple's open source renamed fde_status to disk_encryption, more readable code preserve alphabetical ordering tiny formatting fix change header comment back to original 2015-03-30 16:48:54 +00:00			`table_name("disk_encryption")`
Make all descriptions use periods consistently. (#3324) 2017-05-25 19:43:58 +00:00			`description("Disk encryption status and information.")`
add encrypted column to block_devices table and implement is_encrypted on each block device (OS X) by querying IORegistry properly query IORegistry remove fde_status implementation from block_devices scaffolding for disk_encryption table add disk_encryption table schema implement disk_enryption table for OS X clang-format the source add newline at the end of disk_encryption.table add device prefix to the bsd_name provide link to apple's open source renamed fde_status to disk_encryption, more readable code preserve alphabetical ordering tiny formatting fix change header comment back to original 2015-03-30 16:48:54 +00:00			`schema([`
Adding description to all the missing table fields 2015-07-16 06:23:42 +00:00			`Column("name", TEXT, "Disk name"),`
			`Column("uuid", TEXT, "Disk Universally Unique Identifier"),`
			`Column("encrypted", INTEGER, "1 If encrypted: true (disk is encrypted), else 0"),`
add libcrypysetup-dev library moved disk_ecryption table spec to crossplatform link libcryptsetup implemented get cipher type and cipher_mode: more idiomatic c++11 no need to explicitly call std::string constructor to convert char * to std::string update cryptsetup sources for centos add function prototype for older libcryptsetup which is in centos6 ifdef check for centos6 which uses older libcryptsetup remove forward declared functions defined in libcryptsetup, stylistic changes 2015-04-25 00:01:14 +00:00			`Column("type", TEXT, "Description of cipher type and mode if available"),`
[#1800] Adds `uuid` and `user_uuid` columns to the `users` table and `disk_encryption` table on Darwin, respectively. 2016-02-10 21:11:29 +00:00			`Column("uid", TEXT, "Currently authenticated user if available (Apple)"),`
			`Column("user_uuid", TEXT, "UUID of authenticated user if available (Apple)"),`
disk_encryption macOS, fix for issue #4479 (#4687) 2018-07-13 09:59:33 +00:00			`Column("encryption_status", TEXT, "Disk encryption status with one of following values: encrypted \| not encrypted \| undefined"),`
add encrypted column to block_devices table and implement is_encrypted on each block device (OS X) by querying IORegistry properly query IORegistry remove fde_status implementation from block_devices scaffolding for disk_encryption table add disk_encryption table schema implement disk_enryption table for OS X clang-format the source add newline at the end of disk_encryption.table add device prefix to the bsd_name provide link to apple's open source renamed fde_status to disk_encryption, more readable code preserve alphabetical ordering tiny formatting fix change header comment back to original 2015-03-30 16:48:54 +00:00			`ForeignKey(column="name", table="block_devices"),`
			`ForeignKey(column="uuid", table="block_devices"),`
			`])`
			`implementation("disk_encryption@genFDEStatus")`