

- OSQUERY COMMAND FOR SERIAL NUMBER UPGRADE
- OSQUERY COMMAND FOR SERIAL NUMBER MAC
- OSQUERY COMMAND FOR SERIAL NUMBER WINDOWS
OSQUERY COMMAND FOR SERIAL NUMBER WINDOWS
(Microsoft Windows Server 2008 R2 Enterprise Edition (full) Service Pack 1 - Wazuh v4.2.5).Ĥ 10:44:34 wazuh-agent: INFO: (1951): Analyzing event log: 'Application'.Ĥ 10:44:34 wazuh-modulesd:osquery: INFO: Module disabled.
OSQUERY COMMAND FOR SERIAL NUMBER UPGRADE
This value is -1 if this time is still being calculated"),Ĭolumn("minutes_to_full_charge", INTEGER, "The number of minutes until the battery is fully charged.4 10:44:34 wazuh-agent: INFO: Received exit signal.Ĥ 10:44:34 wazuh-agent: INFO: Set pending exit signal.Ĥ 10:44:34 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector.Ĥ 10:44:34 wazuh-agent: INFO: Using notify time: 10 and max time to reconnect: 60Ĥ 10:44:34 wazuh-agent: INFO: (1410): Reading authentication keys file.Ĥ 10:44:34 wazuh-agent: INFO: (1350): Active response disabled.Ĥ 10:44:34 wazuh-agent: INFO: Using AES as encryption method.Ĥ 10:44:34 wazuh-agent: INFO: Trying to connect to server (x.x.x.x:1514/tcp).Ĥ 10:44:34 wazuh-agent: INFO: (6001): File integrity monitoring disabled.Ĥ 10:44:34 wazuh-agent: WARNING: The check_winaudit option is deprecated in favor of the SCA module.Ĥ 10:44:34 rootcheck: INFO: Started (pid: 11708).Ĥ 10:44:34 wazuh-agent: INFO: (4102): Connected to the server (x.x.x.x:1514/tcp).Ĥ 10:44:34 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started.Ĥ 10:44:34 wazuh-agent: INFO: Windows version is 6.0 or newer.

0 otherwise"),Ĭolumn("designed_capacity", INTEGER, "The battery's designed capacity in mAh"),Ĭolumn("max_capacity", INTEGER, "The battery's actual capacity when it is fully charged in mAh"),Ĭolumn("current_capacity", INTEGER, "The battery's current charged capacity in mAh"),Ĭolumn("percent_remaining", INTEGER, "The percentage of battery remaining before it is drained"),Ĭolumn("amperage", INTEGER, "The battery's current amperage in mA"),Ĭolumn("voltage", INTEGER, "The battery's current voltage in mV"),Ĭolumn("minutes_until_empty", INTEGER, "The number of minutes until the battery is fully depleted.

0 otherwise"),Ĭolumn("charged", INTEGER, "1 if the battery is currently completely charged.

OSQUERY COMMAND FOR SERIAL NUMBER MAC
Description("Provides information about the internal battery of a Macbook.")Ĭolumn("manufacturer", TEXT, "The battery manufacturer's name"),Ĭolumn("manufacture_date", INTEGER, "The date the battery was manufactured UNIX Epoch"),Ĭolumn("model", TEXT, "The battery's model number"),Ĭolumn("serial_number", TEXT, "The battery's unique serial number"),Ĭolumn("cycle_count", INTEGER, "The number of charge/discharge cycles"),Ĭolumn("health", TEXT, "One of the following: \"Good\" describes a well-performing battery, \"Fair\" describes a functional battery with limited capacity, or \"Poor\" describes a battery that's not capable of providing power"),Ĭolumn("condition", TEXT, "One of the following: \"Normal\" indicates the condition of the battery is within normal tolerances, \"Service Needed\" indicates that the battery should be checked out by a licensed Mac repair service, \"Permanent Failure\" indicates the battery needs replacement"),Ĭolumn("state", TEXT, "One of the following: \"AC Power\" indicates the battery is connected to an external power source, \"Battery Power\" indicates that the battery is drawing internal power, \"Off Line\" indicates the battery is off-line or no longer connected"),Ĭolumn("charging", INTEGER, "1 if the battery is currently being charged by a power source.
