select encrypted from disk_encryption join mounts on disk_encryption.name = mounts.device where mounts.path = '/';
osquery planner: Opening cursor (1) for table: disk_encryption
osquery planner: Opening cursor (2) for table: mounts
osquery planner: Scanning rows for cursor (1)
osquery planner: Adding constraint to cursor (2): path = /
osquery planner: Adding constraint to cursor (2): device = /dev/disk0
osquery planner: Scanning rows for cursor (2)
osquery planner: Adding constraint to cursor (2): path = /
osquery planner: Adding constraint to cursor (2): device = /dev/disk0s1
osquery planner: Scanning rows for cursor (2)
osquery planner: Adding constraint to cursor (2): path = /
osquery planner: Adding constraint to cursor (2): device = /dev/disk0s2
osquery planner: Scanning rows for cursor (2)
osquery planner: Adding constraint to cursor (2): path = /
osquery planner: Adding constraint to cursor (2): device = /dev/disk0s3
osquery planner: Scanning rows for cursor (2)
osquery planner: Adding constraint to cursor (2): path = /
osquery planner: Adding constraint to cursor (2): device = /dev/disk1
osquery planner: Scanning rows for cursor (2)
osquery planner: Closing cursor (1)
osquery planner: Closing cursor (2)
+-----------+
| encrypted |
+-----------+
| 1         |
+-----------+
Run Time: real 0.008 user 0.002368 sys 0.002495