πŸ’½ Mobile Device Management (MDM) Data Points

Sabrina from deeploi
Sabrina from deeploi
  • Updated

With our mobile device management system, we can access certain information about company devices to ensure everything is working correctly, secure, and compliant.

There are two types of information we can access:

  1. Standard device information (API-accessible data) β€“ this includes things like the device name, operating system, or which software is installed. This type of data is automatically made available through our MDM (Fleet DM) and is shown in the table below.
  2. Additional device details β€“ Fleet also allows us to look up more specific technical information by entering manual requests (called queries). These are only used by deeploi for support or troubleshooting purposes when needed. You can find a full list of these possible data points here.

πŸ”’ Important Diclaimer: We do not access or collect:

  • Browser activity or history
  • Location or GPS data

➑️ What about IP addresses?
Some technical data (like IP addresses) may be visible, but we do not use it to determine or track your location. While IPs can sometimes give a rough idea of city-level location, we do not process them as location data or use them for any geolocation purposes.

We only access technical data necessary to keep devices secure, up to date, and functioning properly.

 

πŸ’» System Information

Data Point Example Description
created_at 2021-08-19T02:02:22Z Time when the host was created in the system
updated_at 2021-08-19T21:14:58Z Last time the host data was updated
id 1 Unique identifier of the host
detail_updated_at 2021-08-19T21:07:53Z Last time detailed information was refreshed
last_restarted_at 2020-11-01T03:01:45Z Last time the system was restarted
software_updated_at 2020-11-05T05:09:44Z Last time installed software was updated
label_updated_at 2021-08-19T21:07:53Z Last time labels were updated
policy_updated_at 2023-06-26T18:33:15Z Last time policy information was updated
last_enrolled_at 2021-08-19T02:02:22Z Last time the host enrolled in the fleet system
seen_time 2021-08-19T21:14:58Z Last time the host communicated with the system
refetch_requested false Whether a manual refetch was requested
hostname Annas-MacBook-Pro.local System hostname
uuid 309a4b7d-0000-0000-8e7f-26ae0815ede8 Unique identifier of the host
platform darwin Operating system platform
osquery_version 5.15.0 Version of osquery installed
orbit_version 1.22.0 Version of Orbit installed (agent software)
fleet_desktop_version 1.22.0 Version of Fleet Desktop
scripts_enabled true Whether scripts are enabled on this host
os_version macOS 15.2 macOS version installed
build 24C101 macOS build number
platform_like darwin Related platform
code_name (empty) Code name of the OS (if any)
uptime 2,10671E+14 System uptime in nanoseconds
memory 16788398080 Total system memory in bytes
team_id null ID of the team (if any)
pack_stats null Data on query packs (if any)
team_name null Name of the team (if any)
gigs_disk_space_available 174.98 Available disk space in gigabytes
percent_disk_space_available 71 Percent of disk space available
gigs_total_disk_space 246 Total disk space in gigabytes
disk_encryption_enabled true Whether FileVault or other disk encryption is enabled
status online Host status
display_text Annas-MacBook-Pro.local Display text of the hostname

βš™οΈ CPU

Data Point Example Description
cpu_type arm64e CPU architecture type
cpu_subtype ARM64E CPU subtype
cpu_brand Apple M1 Brand/model of the CPU
cpu_physical_cores 8 Number of physical CPU cores
cpu_logical_cores 8 Number of logical CPU cores (with hyperthreading)

πŸ“Ό Hardware

Data Point Example Description
hardware_vendor Apple Inc. Manufacturer of the hardware
hardware_model MacBookPro17,1 Model identifier
hardware_version (empty) Hardware version (if any)
hardware_serial C0124FXASD6G Serial number of the device
computer_name Anna's MacBook Pro User-assigned computer name
display_name Anna's MacBook Pro Display name of the host

πŸ›œ Network

Data Point Example Description
public_ip 123.45.678.910 Public IP address
primary_ip 172.27.0.6 Primary internal IP address
primary_mac 02:42:ac:1b:00:06 MAC address

πŸ”’ Fleet Configuration

Data Point Example Description
distributed_interval 10 Frequency (in seconds) of distributed query checks
config_tls_refresh 10 Frequency (in seconds) of TLS (transport layer security) config refresh
logger_tls_period 10 TLS (transport layer security) logger interval

πŸ‘οΈ Issues

Data Point Example Description
failing_policies_count 1 Number of policies that are currently failing
critical_vulnerabilities_count 2 Number of critical vulnerabilities (Premium only)
total_issues_count 3 Total number of issues

πŸ”‹ Battery

Data Point Example Description
battery.cycle_count 999 Number of battery charge cycles
battery.health Normal Current battery health status

🌍 Geolocation (not configured)

⚠️ This is not configured for deeploi customers and therefore cannot be accessed by deeploi!

Data Point Example Description
geolocation.country_iso US ISO country code of the device's location
geolocation.city_name New York City where the device is located
geolocation.geometry.coordinates [40.6799, -74.0028] Latitude and longitude of device location

πŸ”§ Maintenance

Data Point Example Description
maintenance_window.starts_at 2024-06-18T13:27:18βˆ’04:00 Scheduled maintenance start time
maintenance_window.timezone America/New_York Timezone for the maintenance window

πŸ‘€ Users

Data Point Example Description
uid 0 User ID (0 usually represents the root user)
username root System username
type (empty) Account type (not provided here)
groupname root User group
shell /bin/sh Default shell assigned to the user
uid 1 Another user ID
username annachao Username of the second user
type (empty) Account type (not provided here)
groupname staff Group to which this user belongs
shell /bin/zsh Shell for the second user
idp_info_updated_at 2025-03-20T02:02:17Z Timestamp when identity provider info was last updated
idp_id f26f8649-1e25-42c5-be71-1b1e6de56d3d Identity Provider user ID
idp_username anna@acme.com User's IDP login name
idp_full_name Anna Chao Full name from the IDP system
idp_groups Product, Designers Groups the user is a member of
other_emails[0].email anna@example.com Alternate email address
other_emails[0].source google_chrome_profiles Source of this alternate email (e.g., browser profile)
other_emails[1].email anna@example.com Another alternate email (duplicate in this example)
other_emails[1].source custom Custom source for this email

πŸ‘©β€πŸ’» Software

Data Point Example Description
id 321 Unique software identifier
name SomeApp.app Name of the software
version 1.0 Version number
source apps Source of detection (e.g., apps, programs)
browser (empty) If it's a browser extension, the browser it belongs to
bundle_identifier com.some.app Application bundle ID (for macOS)
last_opened_at 2021-08-18T21:14:00Z When the app was last opened
generated_cpe (empty) CPE string, if generated
vulnerabilities null Detected vulnerabilities (null if none)
installed_paths /usr/lib/some-path-2 Paths where the software is installed

✏️ MDM

Data Point Example Description
encryption_key_available true Whether a FileVault encryption key is available
enrollment_status On (manual) How the device is enrolled in MDM (e.g., manual, automated)
name Fleet Name of the MDM provider
connected_to_fleet true Whether the device is connected to the MDM server
server_url https://acme.com/mdm/apple/mdm URL of the MDM server
device_status unlocked Status of the device from MDM's perspective
pending_action (empty) Any MDM command/action pending for the device

🎯 MDM profile

Data Point Example Description
profile_uuid 954ec5ea-a334-4825-87b3-937e7e381f24 Unique identifier of the configuration profile
name profile1 Name of the profile
status verifying Status of the profile (e.g., verifying, installed)
operation_type install Type of operation being performed (e.g., install/remove)
detail (empty) Additional details about the profile

πŸ’‘ macOS

Data Point Example Description
disk_encryption verified Status of disk encryption (FileVault)
action_required null Any required user action (if applicable)
bootstrap_package_status installed Status of the bootstrap package
bootstrap_package_name test.pkg Name of the bootstrap package
detail (empty) Additional detail (optional)
status verified Status of OS-level disk encryption
detail (empty) Optional extra info or error message

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request

Comments

0 comments

Please sign in to leave a comment.