Vitals

Fleet’s built-in queries for collecting and storing important device information.

Apple

Linux

Windows

ChromeOS

Battery Disk encryption Disk space Google Chrome profiles Host certificates MDM MDM configuration profiles MDM Disk encryption key file MDM Disk encryption key file lines Munki info Network interfaces Orbit information Operating system information Osquery flags Osquery information Scheduled osquery statistics Software Software codesign Software Firefox Software Python packages Software Python packages including user directory VScode extensions Uptime Users

Disk encryption Disk space Google Chrome profiles Network interfaces Orbit information Operating system information Osquery flags Osquery information Scheduled osquery statistics Software Software Python packages Software Python packages including user directory VScode extensions Uptime Users

Battery Disk encryption Disk space Google Chrome profiles MDM Network interfaces Orbit information Operating system information Operating system version Osquery flags Osquery information Scheduled osquery statistics Software Python packages Software Python packages including user directory VScode extensions Software System information Uptime Users Windows update history

ChromeOS profile user info Google Chrome profiles Network interfaces Operating system information Software Users

Google Chrome profiles

Retrieves the email address of Google Chrome profile on a host.

Query PowerShellNEW BashNEW

SELECT 
  email 
FROM google_chrome_profiles 
WHERE NOT ephemeral AND email <> ''

$chromeLocalState = "$env:LOCALAPPDATA\Google\Chrome\User Data\Local State"
if (-not (Test-Path $chromeLocalState)) { exit }
$json = Get-Content $chromeLocalState -Raw | ConvertFrom-Json
$profiles = $json.profile.info_cache
foreach ($prop in $profiles.PSObject.Properties.Value) {
    $isEphemeral = $false
    if ($prop.PSObject.Properties.Name -contains "ephemeral") {
        $isEphemeral = $prop.ephemeral
    } elseif ($prop.PSObject.Properties.Name -contains "is_ephemeral") {
        $isEphemeral = $prop.is_ephemeral
    }
    $email = $prop.email
    if (-not $isEphemeral -and -not [string]::IsNullOrEmpty($email)) {
        Write-Output $email
    }
}

cat "$HOME/Library/Application Support/Google/Chrome/Local State" | jq -r '.profile.info_cache|to_entries[]|select(.value.is_ephemeral==false and .value.email != "")|.value.email'