osquery-1/specs/posix/disk_encryption.table
2017-05-25 12:43:58 -07:00

14 lines
679 B
Plaintext

table_name("disk_encryption")
description("Disk encryption status and information.")
schema([
Column("name", TEXT, "Disk name"),
Column("uuid", TEXT, "Disk Universally Unique Identifier"),
Column("encrypted", INTEGER, "1 If encrypted: true (disk is encrypted), else 0"),
Column("type", TEXT, "Description of cipher type and mode if available"),
Column("uid", TEXT, "Currently authenticated user if available (Apple)"),
Column("user_uuid", TEXT, "UUID of authenticated user if available (Apple)"),
ForeignKey(column="name", table="block_devices"),
ForeignKey(column="uuid", table="block_devices"),
])
implementation("disk_encryption@genFDEStatus")