Tables

Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.

Apple

Linux

Windows

ChromeOS

sharing_preferences

macOS Sharing preferences.

Column	Type	Description
bluetooth_sharing	integer	1 If bluetooth sharing is enabled for any user else 0
content_caching	integer	1 If content caching is enabled else 0
disc_sharing	integer	1 If CD or DVD sharing is enabled else 0
file_sharing	integer	1 If file sharing is enabled else 0
internet_sharing	integer	1 If internet sharing is enabled else 0
printer_sharing	integer	1 If printer sharing is enabled else 0
remote_apple_events	integer	1 If remote apple events are enabled else 0
remote_login	integer	1 If remote login is enabled else 0
remote_management	integer	1 If remote management is enabled else 0
screen_sharing	integer	1 If screen sharing is enabled else 0

Example

Identify systems where any type of sharing is enabled. This table can be very useful for building policies for specific types of sharing.

SELECT * FROM sharing_preferences WHERE screen_sharing='1' OR file_sharing='1' OR printer_sharing='1' OR remote_login='1' OR remote_management='1' OR remote_apple_events='1' OR internet_sharing='1' OR bluetooth_sharing='1' OR disc_sharing='1' OR content_caching='1';

Edit page