Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
ntdomains
ntdomains
Display basic NT domain information of a Windows machine.
| Column | Type | Description |
|---|---|---|
| client_site_name | text | The name of the site where the domain controller is configured. |
| dc_site_name | text | The name of the site where the domain controller is located. |
| dns_forest_name | text | The name of the root of the DNS tree. |
| domain_controller_address | text | The IP Address of the discovered domain controller.. |
| domain_controller_name | text | The name of the discovered domain controller. |
| domain_name | text | The name of the domain. |
| name | text | The label by which the object is known. |
| status | text | The current status of the domain object. |
Example
If the system is joined to a domain, this query will return the domain name as well as all known domain controllers and their IP addresses.
SELECT domain_name, domain_controller_name, domain_controller_address, status FROM ntdomains WHERE domain_name != "";
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
