Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Hey folks, does anyone know what table fleet pulls the ‘used by’ email address from for a device?

Yep its a "detail query" that pulls from `google_chrome_profiles`  <https://fleetdm.com/docs/using-fleet/detail-queries-summary#google-chrome-profiles>

and can be overrided in the configuration <https://fleetdm.com/docs/using-fleet/configuration-files#features-detail-query-overrides>

changed ours to only return a corporate chrome profile, or a `logged_in_user` if chrome profile was null

Damn I was hoping it wasnt linked to chrome policy as I wanted to compare that value vs chrome profile.