Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
drivers
Details for in-use Windows device drivers. This does not display installed but unused drivers.
Column | Type | Description |
---|---|---|
class | text | Device/driver class name |
date | bigint | Driver date |
description | text | Driver description |
device_id | text | Device ID |
device_name | text | Device name |
driver_key | text | Driver key |
image | text | Path to driver image file |
inf | text | Associated inf file |
manufacturer | text | Device manufacturer |
provider | text | Driver provider |
service | text | Driver service name, if one exists |
service_key | text | Driver service registry key |
signed | integer | Whether the driver is signed or not |
version | text | Driver version |
select * from drivers