mirror of
https://github.com/fleetdm/fleet
synced 2026-05-21 16:08:47 +00:00
26 lines
939 B
YAML
26 lines
939 B
YAML
name: platform_info
|
|
description: The `platform_info` osquery table collects boot platform information from a computer. The `platform_info` table works on Linux, macOS and Windows.
|
|
examples: |-
|
|
Basic query:
|
|
|
|
```
|
|
SELECT extra,firmware_type,vendor FROM platform_info;
|
|
```
|
|
|
|
This query results in a listing of the following attributes on a macOS host running a Windows 11 virtual machine in the Parallels.app:
|
|
|
|
Mac -
|
|
- extra = "Darwin Kernel Version 23.5.0: Wed May 1 20:14:38 PDT 2024; root:xnu-10063.121.3~5/RELEASE_ARM64_T6020"
|
|
- firmware_type = "iboot"
|
|
- vendor = "Apple Inc."
|
|
|
|
Windows -
|
|
- extra = ""
|
|
- firmware_type = "uefi"
|
|
- vendor = "Parallels International GmbH."
|
|
notes: |-
|
|
Links:
|
|
- EFI: https://en.wikipedia.org/wiki/EFI_system_partition
|
|
- iboot: https://en.wikipedia.org/wiki/IBoot
|
|
- UEFI: https://en.wikipedia.org/wiki/UEFI#Classes
|
|
- System booting: https://en.wikipedia.org/wiki/Booting
|