Tables

Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.

Apple

memory_array_mapped_addresses

Data associated for address mapping of physical memory arrays.

Column	Type	Description
ending_address	text	Physical ending address of last kilobyte of a range of memory mapped to physical memory array
handle	text	Handle, or instance number, associated with the structure
memory_array_handle	text	Handle of the memory array associated with this structure
partition_width	integer	Number of memory devices that form a single row of memory for the address partition of this structure
starting_address	text	Physical stating address, in kilobytes, of a range of memory mapped to physical memory array