cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Claim your free VMworld 2020 ticket now for a completely digital experience to learn about how VMware Carbon Black can protect you from sophisticated threats.

Available Folders via SMB or AFP

Description: Folders available to others via SMB or AFP

What The Data Shows: Ensure available shares conform to policy

SQL: 

SELECT * 
FROM shared_folders;

 

  

0 Votes
4 Comments
Community Manager
Community Manager
Status changed to: Approved
 
Contributor II

Checked this today and that table does not seem to exist in the current osquery schema, however with an 'osqueryi.exe > .tables' check, it appears the table we're after is 'shared_resources'

 

SELECT * 

FROM shared_resources; 

 

Carbon Black Employee
Status changed to: Under Review

Hi @mrpeters22 the shared_folders table is for mac only, are you looking for a similar query for Windows? Then yes, shared_resources is the right table.

Contributor II

@tmccormackthis is perfect - thank you for the quick response. Yes, this was on a Windows device :)

Have a great day!