help with live discovery query - Readable free hdd / Partition space

Question

Hi everybody, 
 I know that Live Discovery is more for threat hunting, but I've seen some really interesting queries out there. One thing I would like to be able to do is get as an output the free disk / partition space for windows machines. I've seen that there is a standard, out of the box query that gives you the free space in bytes. Any chance somebody could help me out to see that in MB or GB? 
 
 Thanks!

Sophos User930 · Accepted Answer

(+) Live Discover Query - Show the % free disk space - Live Discover & Response Query Forum - Intercept X Endpoint - Sophos Community 
 has: 
 SELECT device_id Drive, description, boot_partition, file_system, printf("%.2f", (CAST (free_space AS FLOAT)/CAST(size AS FLOAT) ) * 100.0 ) || '%' Percent_Free, printf("%.2f", CAST(free_space AS FLOAT)/1024.0/1024.0/1024.0) 'Free_Space(GB)', printf("%.2f", CAST(size AS FLOAT)/1024.0/1024.0/1024.0) 'Size(GB)', type FROM logical_drives; 
 Does that help?

help with live discovery query - Readable free hdd / Partition space

Top Replies