Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
pci_devices
PCI devices active on the host system.
Column | Type | Description |
---|---|---|
driver | text | PCI Device used driver |
model | text | PCI Device model |
model_id | text | Hex encoded PCI Device model identifier |
pci_class | text | PCI Device class |
pci_class_id | text | PCI Device class ID in hex format Only available on Linux |
pci_slot | text | PCI Device used slot |
pci_subclass | text | PCI Device subclass Only available on Linux |
pci_subclass_id | text | PCI Device subclass in hex format Only available on Linux |
subsystem_model | text | Device description of PCI device subsystem Only available on Linux |
subsystem_model_id | text | Model ID of PCI device subsystem Only available on Linux |
subsystem_vendor | text | Vendor of PCI device subsystem Only available on Linux |
subsystem_vendor_id | text | Vendor ID of PCI device subsystem Only available on Linux |
vendor | text | PCI Device vendor |
vendor_id | text | Hex encoded PCI Device vendor identifier |
This table allows you to list PCI devices. With this query, identify devices with a specific model ID. This can be useful when trying to identify systems that use common hardware, for example, when trying to target firmware updates or understand similarities between problematic systems.
SELECT driver, model, vendor, vendor_id FROM pci_devices WHERE model_id='0x1001';