Vitals

Fleet’s built-in queries for collecting and storing important device information.

Apple

Linux

Windows Windows

ChromeOS

Battery Disk encryption Disk space Google Chrome profiles MDM MDM configuration profiles MDM Disk encryption key file MDM Disk encryption key file lines Munki info Network interfaces Orbit information Operating system information Osquery flags Osquery information Scheduled osquery statistics Software Software codesign Software Firefox VScode extensions Uptime Users

Disk encryption Disk space Google Chrome profiles Network interfaces Orbit information Operating system information Osquery flags Osquery information Scheduled osquery statistics Software VScode extensions Uptime Users

Battery Disk encryption Disk space Google Chrome profiles MDM Network interfaces Orbit information Operating system information Operating system version Osquery flags Osquery information Scheduled osquery statistics VScode extensions Software System information Uptime Users Windows update history

ChromeOS profile user info Google Chrome profiles Network interfaces Operating system information Software Users

Disk encryption

Retrieves the disk encryption status of a Windows device.

Query PowerShellNEW BashNEW

WITH encrypted(enabled) AS (
    SELECT CASE WHEN
      NOT EXISTS(SELECT 1 FROM windows_optional_features WHERE name = 'BitLocker')
      OR
      (SELECT 1 FROM windows_optional_features WHERE name = 'BitLocker' AND state = 1)
    THEN (SELECT 1 FROM bitlocker_info WHERE drive_letter = 'C:' AND protection_status = 1)
  END)
  SELECT 1 FROM encrypted WHERE enabled IS NOT NULL

$bitlockerFeature = Get-WindowsOptionalFeature -Online -FeatureName "BitLocker" -ErrorAction SilentlyContinue
if (-not $bitlockerFeature -or $bitlockerFeature.State -eq "Enabled") {
    $bitlockerVolume = Get-BitLockerVolume -MountPoint "C:" -ErrorAction SilentlyContinue
    if ($bitlockerVolume -and ($bitlockerVolume.ProtectionStatus -eq 1 -or $bitlockerVolume.ProtectionStatus -eq "On")) {
        Write-Output "1"
    }
}