Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
windows_optional_features
windows_optional_features
Lists names and installation states of windows features. Maps to Win32_OptionalFeature WMI class.
| Column | Type | Description |
|---|---|---|
| caption | text | Caption of feature in settings UI |
| name | text | Name of the feature |
| state | integer | Installation state value. 1 == Enabled, 2 == Disabled, 3 == Absent |
| statename | text | Installation state name. 'Enabled','Disabled','Absent' |
Example
SMBv1 is deprecated and has known, unpatched vulnerablities; it should be disabled whenever possible. This query lists enabled SMBv1 services (client and/or server).
SELECT name,caption,statename FROM windows_optional_features WHERE name LIKE 'SMB1Protocol%' AND state = 1;
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
