Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
firefox_addons
Firefox browser add-ons (plugins).
Column | Type | Description |
---|---|---|
active | integer | 1 If the addon is active else 0 |
autoupdate | integer | 1 If the addon applies background updates else 0 |
creator | text | Addon-supported creator string |
description | text | Addon-supplied description string |
disabled | integer | 1 If the addon is application-disabled else 0 |
identifier | text | Addon identifier |
location | text | Global, profile location |
name | text | Addon display name |
path | text | Path to plugin bundle |
source_url | text | URL that installed the addon |
type | text | Extension, addon, webapp |
uid | bigint | The local user that owns the addon |
version | text | Addon-supplied version string |
visible | integer | 1 If the addon is shown in browser else 0 |
SELECT * FROM users CROSS JOIN firefox_addons USING (uid);
See Firefox extensions by user as well as information about their creator and automatic update status.
SELECT u.username, f.identifier, f.creator, f.description, f.version, f.autoupdate FROM users u CROSS JOIN firefox_addons f USING (uid) WHERE f.active='1';
Querying this table requires joining against the users
table. Learn more