Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
cryptoinfo
Get info about a certificate on the host.
Column | Type | Description |
---|---|---|
fullkey | text | The expanded name of the specific item that describes the drive. |
key | text | A specific item that describes the drive. |
parent | text | The key's parent. |
passphrase | text | The passphrase for the certificate. |
path | text | Path to the certificate. Required in WHERE clause |
query | text | The query is printed in this column. For example the SQL SELECT * FROM cryuptsetup_status WHERE name = 'LUKS_DRIVE' will print "*" in the query column. |
value | text | The value for the specified key. |
This table is not a core osquery table. It is included as part of fleetd, the osquery manager from Fleet. Code based on work by Kolide.