Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 17:08:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 83

Create system_profiler.yml (#33084)

Browse source 
Updated explanation & example queries.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
This commit is contained in:
Brock Walters 2025-09-16 19:19:34 -04:00 committed by GitHub
parent a7d71674b8
commit f5fbfc43a4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 87 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

87
schema/tables/system_profiler.yml Normal file
View file

@ -0,0 +1,87 @@
name: system_profiler
description: |-
The macOS system_profiler binary reports on the hardware and software configuration of a Mac. It can generate detailed, plain text, XML or json reports which can be exported from the Terminal or generated as .spx files and read by the macOS System Information.app based on "data types".
examples: |-
Collect Mac Activation Lock Status:
```
SELECT json_extract (value,'$.activation_lock_status')
FROM system_profiler
WHERE data_type='SPHardwareDataType';
```
Collect Mac Hardware UUID (platform_uuid):
```
SELECT json_extract (value,'$.platform_UUID')
FROM system_profiler
WHERE data_type='SPHardwareDataType';
```
Collect Mac Serial Number:
```
SELECT json_extract (value,'$.serial_number')
FROM system_profiler
WHERE data_type='SPHardwareDataType';
```
notes: |-
The system_profiler binary is a rich source of macOS data which can be used in many ways to enhance Mac management.
Not all System Profiler data types are available via the system_profiler osquery table. Some data types are legacy & others are OS version-specific.
The following data types are available from the system_profiler binary as of macOS 26:
- SPParallelATADataType
- SPUniversalAccessDataType
- SPSecureElementDataType
- SPApplicationsDataType
- SPAudioDataType
- SPBluetoothDataType
- SPCameraDataType
- SPCardReaderDataType
- SPiBridgeDataType
- SPDeveloperToolsDataType
- SPDiagnosticsDataType
- SPDisabledSoftwareDataType
- SPDiscBurningDataType
- SPEthernetDataType
- SPExtensionsDataType
- SPFibreChannelDataType
- SPFirewallDataType
- SPFontsDataType
- SPFrameworksDataType
- SPDisplaysDataType
- SPHardwareDataType
- SPInstallHistoryDataType
- SPInternationalDataType
- SPNetworkLocationDataType
- SPLogsDataType
- SPManagedClientDataType
- SPMemoryDataType
- SPNVMeDataType
- SPNetworkDataType
- SPPCIDataType
- SPParallelSCSIDataType
- SPPowerDataType
- SPPrefPaneDataType
- SPPrintersSoftwareDataType
- SPPrintersDataType
- SPConfigurationProfileDataType
- SPRawCameraDataType
- SPLegacySoftwareDataType
- SPSASDataType
- SPSerialATADataType
- SPSPIDataType
- SPSmartCardsDataType
- SPSoftwareDataType
- SPStartupItemDataType
- SPStorageDataType
- SPSyncServicesDataType
- SPThunderboltDataType
- SPUSBHostDataType
- SPNetworkVolumeDataType
- SPAirPortDataType