Adrian Junge
01/18/2023, 2:46 PMKathy Satterlee
01/18/2023, 5:42 PMsystem_table
to check the hardware manufacture of the device. If it is a VM, you will end up getting names of VM vendors (Vmware, Virtualbox, etc)
VM host
osqueryi.exe "select hardware_model from system_info"
+----------------+
| hardware_model |
+----------------+
| VMware7,1 |
+----------------+
Physical host
osqueryi.exe "select hardware_model from system_info"
+---------------------+
| hardware_model |
+---------------------+
| HP Laptop 15-dw3xxx |
Adrian Junge
01/19/2023, 9:52 AMKathy Satterlee
01/19/2023, 4:28 PMosquery
with sudu
... or without if you already were?
Is it just that column that comes up empty, or do you get all blank if you osqueryi.exe "select * from system_info"
Adrian Junge
01/19/2023, 5:01 PM