```osquery> SELECT * FROM block_devices WHERE t...
# generalf
fritz
07/30/2020, 3:18 PM Copy code
osquery> SELECT * FROM block_devices WHERE type = 'USB';
+--------------+------------+---------+-----------------+------------+------------+--------------------------------------+------+-------------------------------+
| name | parent | vendor | model | size | block_size | uuid | type | label |
+--------------+------------+---------+-----------------+------------+------------+--------------------------------------+------+-------------------------------+
| /dev/disk2 | | Samsung | Portable SSD T5 | 1953525168 | 512 | | USB | Samsung Portable SSD T5 Media |
| /dev/disk2s1 | /dev/disk2 | Samsung | Portable SSD T5 | 409600 | 512 | 389D597D-A736-40C4-AF3E-0EAF937170B4 | USB | EFI System Partition |
| /dev/disk2s2 | /dev/disk2 | Samsung | Portable SSD T5 | 1952853344 | 512 | CCDBD7BF-5E12-4911-B2A2-13088037964D | USB | Untitled 2 |
| /dev/disk4 | | | Patriot Memory | 123535360 | 512 | | USB | Patriot Memory Media |
| /dev/disk4s1 | /dev/disk4 | | Patriot Memory | 67108864 | 512 | | USB | Untitled 1 |
+--------------+------------+---------+-----------------+------------+------------+--------------------------------------+------+-------------------------------+🦜 1
🆒 1