Function
Arg | Description | Type |
---|---|---|
client_id | string (required) |
Required Permissions: READ_RESULTS
Returns client info (like the fqdn) from the datastore.
Velociraptor maintains basic information about the client in the data store, such as its hostname, OS etc.
This information is refreshed each time the Generic.Client.Info
artifact is collected from the endpoint so it can be out of
date. This process is called “interrogation” of the endpoint.
You can refresh the entire fleet’s datastore by scheduling a
Generic.Client.Info
hunt.