Solutions
Device management
Remotely manage, and protect laptops and mobile devices.
Orchestration
Automate tasks across devices, from app installs to scripts.
Software management
Inventory, patch, and manage installed software.
Infrastructure as code
See every change, undo any error, repeat every success.
Extend Fleet
Integrate your favorite tools with Fleet.
More
Device management
Remotely manage, and protect laptops and mobile devices.
Orchestration
Automate tasks across devices, from app installs to scripts.
Software management
Inventory, patch, and manage installed software.
Infrastructure as code
See every change, undo any error, repeat every success.
Extend Fleet
Integrate your favorite tools with Fleet.
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
wifi_networks
Wi-Fi networks previously connected to by this Mac, or that are otherwise in this computer's known/remembered Wi-Fi networks list.
| Column | Type | Description |
|---|---|---|
| add_reason | text | Shows why this network was added, via menubar or command line or something else |
| added_at | integer | Time this network was added as a unix_time |
| auto_join | integer | 1 if this network set to join automatically, 0 otherwise |
| auto_login | integer | 1 if auto login is enabled, 0 otherwise Not returned in SELECT * FROM wifi_networks. |
| captive_login_date | integer | Time this network logged in to a captive portal as unix_time |
| captive_portal | integer | 1 if this network has a captive portal, 0 otherwise |
| disabled | integer | 1 if this network is disabled, 0 otherwise Not returned in SELECT * FROM wifi_networks. |
| last_connected | integer | Last time this network was connected to as a unix_time (max of last_connected_automatic and last_connected_manual, if available) Not returned in SELECT * FROM wifi_networks. |
| last_connected_automatic | integer | Last time this network was automatically connected to by the system as a unix_time |
| last_connected_manual | integer | Last time this network was manually connected to by the user as a unix_time |
| network_name | text | Name of the network |
| passpoint | integer | 1 if Passpoint is supported, 0 otherwise Not returned in SELECT * FROM wifi_networks. |
| personal_hotspot | integer | 1 if this network is a personal hotspot, 0 otherwise |
| possibly_hidden | integer | 1 if network is possibly a hidden network, 0 otherwise |
| roaming | integer | 1 if roaming is supported, 0 otherwise Not returned in SELECT * FROM wifi_networks. |
| roaming_profile | text | Describe the roaming profile, usually one of Single, Dual or Multi |
| security_type | text | Type of security on this network |
| ssid | text | SSID octets of the network |
| temporarily_disabled | integer | 1 if this network is temporarily disabled, 0 otherwise |
| was_captive_network | integer | 1 if this network was previously a captive network, 0 otherwise |
Find WiFi networks configured on Macs that are unencrypted and require a captive portal. This can be useful to understand how much people use laptops in hotels, airports and other environments, and is a good indicator that tools such as DNS-over-HTTPS would improve privacy of connectivity.
SELECT network_name FROM wifi_networks WHERE security_type='Open' AND captive_portal='1';Discover last connected times for WiFi networks:
SELECT network_name,last_connected,last_connected_automatic,last_connected_manual
FROM wifi_networks
ORDER BY
COALESCE(last_connected, 0)
DESC
LIMIT 10;