client_info

Function

ArgDescriptionType
client_idstring (required)

Required Permissions: READ_RESULTS

Description

Returns client info (like the fqdn) from the datastore.

Velociraptor maintains basic information about the client in the data store, such as its hostname, OS etc.

This information is refreshed each time the Generic.Client.Info artifact is collected from the endpoint so it can be out of date. This process is called “interrogation” of the endpoint.

You can refresh the entire fleet’s datastore by scheduling a Generic.Client.Info hunt.