Tables

Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.

Apple

ntfs_acl_permissions

Retrieve NTFS ACL permission information for files and directories.

Column	Type	Description
access	text	Specific permissions that indicate the rights described by the ACE.
inherited_from	text	The inheritance policy of the ACE.
path	text	Path to the file or directory. Required in `WHERE` clause
principal	text	User or group to which the ACE applies.
type	text	Type of access mode for the access control entry.