Version: 1
restore

Contents

Method

GetOutboundMappedDriveHistory

ModuleDevice
LibraryCore
Action

Retrieves information about any connected shared folders or drives this machine uses on remote servers.

Parameters

None

Return values

A single row per instance of a usage of a local shared folder or drive at the time the share was established for historical one, or at the time the instruction executed for current ones. A share will be repeated with different client IP addresses or FQDN.

  • ClientFqdn (string): The FQDN of the client that was using the shared drive/folder
  • ClientIpAddress (string): The IP Address of the client that was using the shared drive/folder
  • FilePath (string): The local path being shared for current shares, for historical shares this will be the file that was being accessed
  • LastSeen (datetime): The time at which the share usage was last seen by this machine,
    • historical share usages will be random times, current shares will all have the same time.
  • Port (string): The port associated with the communication between client and server.
  • ShareName (string): The name of the shared drive/folder on this 'server' machine
Example
Device.GetOutboundMappedDriveHistory();
Platforms
  • Windows
  • Linux
  • MacOS
  • Solaris Intel
  • Solaris Sparc
  • Android
Notes