diff --git a/schema/osquery_fleet_schema.json b/schema/osquery_fleet_schema.json index 31dcba08bd..329242f614 100644 --- a/schema/osquery_fleet_schema.json +++ b/schema/osquery_fleet_schema.json @@ -17218,7 +17218,8 @@ "platforms": [ "windows" ], - "description": "Allows querying MDM enrolled devices using \"get\" commands.", + "description": "Allows querying MDM enrolled devices using \"get\" commands. Currently, only supports commands that target the device scope. Head to the [Windows configuration profiles (CSPs) documentation](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider) to verify that the setting support the device scope.", + "examples": "Identify Macs that are DEP capable but have not been enrolled to MDM.\n\n```\nSELECT raw_mdm_command_output FROM mdm_bridge WHERE mdm_command_input = '1./Device/Vendor/MSFT/Policy/Result/System/AllowTelemetry';\n```", "columns": [ { "name": "enrollment_status", diff --git a/schema/tables/mdm_bridge.yml b/schema/tables/mdm_bridge.yml index 52fb0e2021..97c65318ea 100644 --- a/schema/tables/mdm_bridge.yml +++ b/schema/tables/mdm_bridge.yml @@ -1,7 +1,13 @@ name: mdm_bridge platforms: - windows -description: Allows querying MDM enrolled devices using "get" commands. +description: Allows querying MDM enrolled devices using "get" commands. Currently, only supports commands that target the device scope. Head to the [Windows configuration profiles (CSPs) documentation](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider) to verify that the setting support the device scope. +examples: |- + Identify Macs that are DEP capable but have not been enrolled to MDM. + + ``` + SELECT raw_mdm_command_output FROM mdm_bridge WHERE mdm_command_input = '1./Device/Vendor/MSFT/Policy/Result/System/AllowTelemetry'; + ``` columns: - name: enrollment_status type: text