Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
filevault_prk
Returns contents of /var/db/FileVaultPRK.dat
.
Column | Type | Description |
---|---|---|
base64_encrypted | text | The base64-encoded contents of the encrypted FileVault personal recovery key stored at /var/db/FileVaultPRK.dat (see also https://developer.apple.com/documentation/devicemanagement/fderecoverykeyescrow) |
This table is not a core osquery table. It is included as part of Fleet's agent (fleetd).