cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Claim your free VMworld 2020 ticket now for a completely digital experience to learn about how VMware Carbon Black can protect you from sophisticated threats.

Discover Mounted Drives

Description: Show mounted file systems

What The Data Shows: All mounted drives per endpoint

SQL: 

SELECT device,path 
FROM mounts;

 

 

0 Votes
3 Comments
Community Manager
Community Manager
Status changed to: Approved
 
Contributor II

I'm not seeing a table by the name of 'mounts' in the current osquery schema (confer\blades\livequery\osqueryi.exe > .tables)

Carbon Black Employee
Status changed to: Approved

The mounts table is only available for Linux and Mac. For Windows you would look at logical_drives.