Windows 논리 디스크 검색

Microsoft.Windows.Server.10.0.LogicalDisk.Discovery (Discovery)

이 검색 규칙은 “Windows Server 2016 이상 논리 디스크”라는 Windows Server 클래스를 검색하여 Windows 2016 이상 운영 체제에서 검색된 논리 디스크(예: C:, D:)의 인스턴스로 채웁니다. 로컬 디스크만 검색됩니다. 이동식, 컴팩트 디스크, 네트워크 드라이브 및 RAM 디스크로 분류되는 논리 디스크는 제외됩니다.

Knowledge Base article:

요약

Element properties:

Target	Microsoft.Windows.Server.10.0.OperatingSystem
Enabled	True
Frequency	86460
Remotable	False

Object Discovery Details:

Discovered Classes and their attribuets:
Microsoft.Windows.Server.10.0.LogicalDisk DeviceID Name Description FileSystem Compressed Size SizeNumeric SizeInMBs DriveType SupportsDiskQuota QuotasDisabled SupportsFileBasedCompression
Discovered relationships and their attribuets:
Microsoft.Windows.ComputerHostsLogicalDevice

Member Modules:

ID	Module Type	TypeId	RunAs
DiscoveryDataSource	DataSource	Microsoft.Windows.Server.10.0.LogicalDiskDiscovery.ModuleType	Default

Source Code:

<Discovery ID="Microsoft.Windows.Server.10.0.LogicalDisk.Discovery" Enabled="true" Target="Microsoft.Windows.Server.10.0.OperatingSystem">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.Windows.Server.10.0.LogicalDisk">

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="DeviceID"/>

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="Name"/>

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="Description"/>

      <Property TypeID="WindowsServer!Microsoft.Windows.Server.LogicalDisk" PropertyID="FileSystem"/>

      <Property TypeID="WindowsServer!Microsoft.Windows.Server.LogicalDisk" PropertyID="Compressed"/>

      <Property TypeID="WindowsServer!Microsoft.Windows.Server.LogicalDisk" PropertyID="Size"/>

      <Property TypeID="WindowsServer!Microsoft.Windows.Server.LogicalDisk" PropertyID="SizeNumeric"/>

      <Property TypeID="WindowsServer!Microsoft.Windows.Server.LogicalDisk" PropertyID="SizeInMBs"/>

      <Property TypeID="WindowsServer!Microsoft.Windows.Server.LogicalDisk" PropertyID="DriveType"/>

      <Property TypeID="WindowsServer!Microsoft.Windows.Server.LogicalDisk" PropertyID="SupportsDiskQuota"/>

      <Property TypeID="WindowsServer!Microsoft.Windows.Server.LogicalDisk" PropertyID="QuotasDisabled"/>

      <Property TypeID="WindowsServer!Microsoft.Windows.Server.LogicalDisk" PropertyID="SupportsFileBasedCompression"/>

    </DiscoveryClass>

    <DiscoveryRelationship TypeID="Windows!Microsoft.Windows.ComputerHostsLogicalDevice"/>

  </DiscoveryTypes>

  <DataSource ID="DiscoveryDataSource" TypeID="Microsoft.Windows.Server.10.0.LogicalDiskDiscovery.ModuleType">

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <ComputerID>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerID>

    <IntervalSeconds>86460</IntervalSeconds>

    <TimeoutSeconds>360</TimeoutSeconds>

  </DataSource>

</Discovery>