diff --git a/handbook/queries/README.md b/handbook/queries/README.md index 9f724d2ac4..5f41e983b1 100644 --- a/handbook/queries/README.md +++ b/handbook/queries/README.md @@ -20,6 +20,7 @@ Fleet's standard query library includes a growing collection of useful queries f - [Get wifi status](./get-wifi-status.md) - [Get Windows machines with unencrypted hard disks](./get-windows-machines-with-unencrypted-hard-disks.md) - [Get platform info](./get-platform-info.md) +- [Get USB devices](./get-usb-devices.md) ### Contributors diff --git a/handbook/queries/get-usb-devices.md b/handbook/queries/get-usb-devices.md new file mode 100644 index 0000000000..a7c7b8677f --- /dev/null +++ b/handbook/queries/get-usb-devices.md @@ -0,0 +1,16 @@ +# Get USB devices + +Shows all USB devices that are actively plugged into the host system. + +### Support +macOS + +### Query +```sql +SELECT * FROM usb_devices; +``` +### Purpose +Informational + +### Remediation +N/A \ No newline at end of file