Channels
doorman
zercurity
infrastructure
code-review
queryhub
apple-silicon
carving
goquery
aws
querycon
golang
file-carving
fuzzing
help-proxy
darkbytes
process-auditing
general
windows
random
fleet-dev
tls
fim
zentral
zeek
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
community-feeds
Powered by
#fleet
Title
s
Scott
03/02/2023, 9:41 AM
Hey folks, does anyone know what table fleet pulls the ‘used by’ email address from for a device?
c
chrismsnz
03/02/2023, 7:18 PM
Yep its a "detail query" that pulls from
google_chrome_profiles
https://fleetdm.com/docs/using-fleet/detail-queries-summary#google-chrome-profiles
and can be overrided in the configuration
https://fleetdm.com/docs/using-fleet/configuration-files#features-detail-query-overrides
changed ours to only return a corporate chrome profile, or a
logged_in_user
if chrome profile was null
s
Scott
03/03/2023, 11:52 AM
Damn I was hoping it wasnt linked to chrome policy as I wanted to compare that value vs chrome profile.
Thanks for the help!
Post