osquery-1/osquery
William Woodruff a8df05dfcd windows/logical_drives: Fix boot partition detection (#5477)
Summary:
This is a follow-up to #5400, fixing the `boot_partition` column.

Previous versions of the table would consistently provide a false negative for bootable drives, thanks to a mismatch in format between `Win32_DiskPartition.DeviceID` and `Win32_LogicalDisk.DeviceID`. This change replaces the use of `Win32_DiskPartition` with `Win32_BootConfiguration` and moves the query to the top-level, fixing the bug and removing the need to make `N` WMI requests for `N` system drives.
Pull Request resolved: https://github.com/facebook/osquery/pull/5477

Differential Revision: D14386989

Pulled By: akindyakov

fbshipit-source-id: 3843f760dd41dc5810048ccf969dc4b0d4674cdc
2019-03-11 04:57:28 -07:00
..
carver Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
config Improve query monitoring 2019-03-08 03:21:45 -08:00
core core/windows/wmi: Refactor to use smart pointers (#5492) 2019-03-08 09:30:36 -08:00
database OSQueryd changes for encoding type in JSON syntax 2019-03-04 09:15:21 -08:00
devtools Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
dispatcher Improve query monitoring 2019-03-08 03:21:45 -08:00
distributed Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
ev2 Stop supporting concurrent wait() calls on buffered_subscription (#5491) 2019-03-01 12:02:37 -08:00
events Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
examples Replace Status(0) calls with Status::success() to appease Lint (#5487) 2019-03-01 04:29:33 -08:00
extensions Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
filesystem Replace Status(0) calls with Status::success() to appease Lint (#5487) 2019-03-01 04:29:33 -08:00
hashing Update osquery licensing wording (#5452) 2019-02-19 10:59:48 -08:00
include/osquery Move sdk.h to osquery/sdk directory (#5499) 2019-03-06 04:30:49 -08:00
killswitch Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
logger OSQueryd changes for encoding type in JSON syntax 2019-03-04 09:15:21 -08:00
main Move plugins to a separate directory [6/?] (#5485) 2019-03-02 04:23:06 -08:00
numeric_monitoring Move plugins to a separate directory [6/?] (#5485) 2019-03-02 04:23:06 -08:00
process Let's use glibc:ld thirdparty dependency instead of linker flag -ldl 2019-02-25 03:05:40 -08:00
profiler Update osquery licensing wording (#5452) 2019-02-19 10:59:48 -08:00
registry Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
remote OSQueryd changes for encoding type in JSON syntax 2019-03-04 09:15:21 -08:00
sdk Move sdk.h to osquery/sdk directory (#5499) 2019-03-06 04:30:49 -08:00
sql OSQueryd changes for encoding type in JSON syntax 2019-03-04 09:15:21 -08:00
tables windows/logical_drives: Fix boot partition detection (#5477) 2019-03-11 04:57:28 -07:00
utils added way to ignore expected when you not interested in function result 2019-03-07 10:10:14 -08:00
BUCK temp solution for xcode support 2019-02-05 07:20:00 -08:00
empty.cpp temp solution for xcode support 2019-02-05 07:20:00 -08:00