Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
groups
groups
Local system groups.
| Column | Type | Description |
|---|---|---|
| comment | text | Remarks or comments associated with the group Only available on Windows |
| gid | bigint | Unsigned int64 group ID |
| gid_signed | bigint | A signed int64 version of gid |
| group_sid | text | Unique group ID Only available on Windows |
| groupname | text | Canonical local group name |
| is_hidden | integer | IsHidden attribute set in OpenDirectory Only available on macOS |
| pid_with_namespace | integer | Pids that contain a namespace Only available on Linux |
Example
See all groups with the IsHidden OpenDirectory attribute:
SELECT * FROM groups WHERE is_hidden='1';Collect the users that are members of the admin group:
SELECT * FROM groups JOIN user_groups USING (gid) JOIN users USING (uid) WHERE groupname='admin';Notes
- On Windows,
gidandgid_signedare always the same
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
