Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
memory_device_mapped_addresses
Data associated for address mapping of physical memory devices.
Column | Type | Description |
---|---|---|
ending_address | text | Physical ending address of last kilobyte of a range of memory mapped to physical memory array |
handle | text | Handle, or instance number, associated with the structure |
interleave_data_depth | integer | The max number of consecutive rows from memory device that are accessed in a single interleave transfer; 0 indicates device is non-interleave |
interleave_position | integer | The position of the device in a interleave, i.e. 0 indicates non-interleave, 1 indicates 1st interleave, 2 indicates 2nd interleave, etc. |
memory_array_mapped_address_handle | text | Handle of the memory array mapped address to which this device range is mapped to |
memory_device_handle | text | Handle of the memory device structure associated with this structure |
partition_row_position | integer | Identifies the position of the referenced memory device in a row of the address partition |
starting_address | text | Physical stating address, in kilobytes, of a range of memory mapped to physical memory array |