Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
device_partitions
Use TSK to enumerate details about partitions on a disk device.
Column | Type | Description |
---|---|---|
blocks | bigint | Number of blocks |
blocks_size | bigint | Byte size of each block |
device | text | Absolute file path to device node Required in WHERE clause |
flags | integer | |
inodes | bigint | Number of meta nodes |
label | text | |
offset | bigint | |
partition | integer | A partition number or description |
type | text |