Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
iokit_registry
The full IOKit registry without selecting a plane.
Column | Type | Description |
---|---|---|
busy_state | integer | 1 if the node is in a busy state else 0 |
class | text | Best matching device class (most-specific category) |
depth | integer | Node nested depth |
id | bigint | IOKit internal registry ID |
name | text | Default name of the node |
parent | bigint | Parent registry ID |
retain_count | integer | The node reference count |
Identify devices with a Yubikey connected. The name will also contain the protocols supported by the key, such as FIDO.
SELECT * from iokit_registry WHERE name LIKE 'Yubi%';