Discover Windows Disk Partitions

Microsoft.Windows.Client.Win10.DiskPartition.Discovery (Discovery)

This rule uses WMI to discover all Windows disk partitions.

Knowledge Base article:

Summary

This Discovery Rule discovers and populates Windows 10 and above Class named “Windows 10 and above Disk Partition” with instances Disk Partitions that are discovered on Windows 10 and above.

Element properties:

Target	Microsoft.Windows.Client.Win10.OperatingSystem
Enabled	True
Frequency	86700
Remotable	False

Object Discovery Details:

Discovered Classes and their attribuets:
Microsoft.Windows.Client.Win10.DiskPartition DeviceID Name Description DiskIndex BlockSize PrimaryPartition Bootable Size
Discovered relationships and their attribuets:
Microsoft.Windows.ComputerHostsLogicalDevice

Member Modules:

ID	Module Type	TypeId	RunAs
DiscoveryDataSource	DataSource	Microsoft.Windows.WmiProviderWithClassSnapshotDataMapper	Default

Source Code:

<Discovery ID="Microsoft.Windows.Client.Win10.DiskPartition.Discovery" Enabled="true" Target="Microsoft.Windows.Client.Win10.OperatingSystem">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.Windows.Client.Win10.DiskPartition">

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="DeviceID"/>

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="Name"/>

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="Description"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.DiskPartition" PropertyID="DiskIndex"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.DiskPartition" PropertyID="BlockSize"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.DiskPartition" PropertyID="PrimaryPartition"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.DiskPartition" PropertyID="Bootable"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.DiskPartition" PropertyID="Size"/>

    </DiscoveryClass>

    <DiscoveryRelationship TypeID="Windows!Microsoft.Windows.ComputerHostsLogicalDevice"/>

  </DiscoveryTypes>

  <DataSource ID="DiscoveryDataSource" TypeID="Windows!Microsoft.Windows.WmiProviderWithClassSnapshotDataMapper">

    <NameSpace>\\$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$\root\cimv2</NameSpace>

    <Query>SELECT DeviceID,Name,DiskIndex,BlockSize,Description,PrimaryPartition,Bootable,Size FROM Win32_DiskPartition</Query>

    <Frequency>86700</Frequency>

    <ClassId>$MPElement[Name="Microsoft.Windows.Client.Win10.DiskPartition"]$</ClassId>

    <InstanceSettings>

      <Settings>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

          <Value>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.LogicalDevice"]/DeviceID$</Name>

          <Value>$Data/Property[@Name='DeviceID']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.LogicalDevice"]/Name$</Name>

          <Value>$Data/Property[@Name='Name']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.DiskPartition"]/DiskIndex$</Name>

          <Value>$Data/Property[@Name='DiskIndex']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.DiskPartition"]/BlockSize$</Name>

          <Value>$Data/Property[@Name='BlockSize']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.LogicalDevice"]/Description$</Name>

          <Value>$Data/Property[@Name='Description']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.DiskPartition"]/PrimaryPartition$</Name>

          <Value>$Data/Property[@Name='PrimaryPartition']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.DiskPartition"]/Bootable$</Name>

          <Value>$Data/Property[@Name='Bootable']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.DiskPartition"]/Size$</Name>

          <Value>$Data/Property[@Name='Size']$</Value>

        </Setting>

      </Settings>

    </InstanceSettings>

  </DataSource>

</Discovery>