https://github.com/osquery/osquery logo
Title
f

fritz

07/20/2021, 7:58 PM
@wkleinhenz if you are using Kolide's SaaS product and/or launcher you can get USB information using the
kolide_wmi
table, if you have only vanilla osquery you can get a little more brittle and cobble something together using the
registry
table like so:
w

wkleinhenz

07/20/2021, 7:59 PM
yeah im using fleetdm with launcher, the table doesnt seem to be in the built in table help but i can give both a shot thanks
f

fritz

07/20/2021, 8:00 PM
IIRC fleetdm is now using their own extension (orbit?) instead of launcher
but I think it is compatible with launcher as well
w

wkleinhenz

07/20/2021, 8:01 PM
yeah right now were still using launcher with fleetdm, i had some issues moving to orbit but its on my radar
f

fritz

07/20/2021, 8:01 PM
👍