This website uses cookies. By browsing this website, you consent to the use of cookies. Learn more.
OK
logo

Query Exchange

Built off the open source project Osquery

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Claim your free VMworld 2020 ticket now for a completely digital experience to learn about how VMware Carbon Black can protect you from sophisticated threats.

Discover Mounted Drives

Status: Approved Submitted by Community Manager on ‎05-14-2019 06:30 AM

Description: Show mounted file systems

What The Data Shows: All mounted drives per endpoint

SQL: 

SELECT device,path 

FROM mounts;

 

 

0 Votes
Comment
3 Comments
Query_Admin
Community Manager
Community Manager
‎05-14-2019 06:30 AM
‎05-14-2019 06:30 AM
Status changed to: Approved
 
mrpeters22
Contributor II
‎06-10-2019 09:12 AM
‎06-10-2019 09:12 AM

I'm not seeing a table by the name of 'mounts' in the current osquery schema (confer\blades\livequery\osqueryi.exe > .tables)

jnelson
Carbon Black Employee
‎06-11-2019 02:25 PM
‎06-11-2019 02:25 PM
Status changed to: Approved

The mounts table is only available for Linux and Mac. For Windows you would look at logical_drives.

logo