Version: 5
restore

Contents

Method

GetOutboundMappedDriveHistory

ModuleDevice
LibraryCore
Action

Retrieves information about any shared folders this machine is exposing.

Parameters

None

Return values

A single row per instance of local shared folder or drive usage. A server share may appear in more than one row for different client IP addresses or FQDN.

  • ClientFqdn (string): The FQDN of the client that was using the shared drive/folder
  • ClientIpAddress (string): The IP Address of the client that was using the shared drive/folder
  • FilePath (string): The local path being shared for current shares, for historical shares this will be the file that was being accessed
  • LastSeen (datetime): The time at which the share usage was last seen by this machine,
    • historical share usages will be at the time of the usage
    • current share usages will all have the instruction execution time
  • Port (string): The port associated with the communication between client and server.
  • ShareName (string): The name of the shared drive/folder on this 'server' machine
Example
Device.GetOutboundMappedDriveHistory();
Platforms
  • Windows
  • Linux
  • MacOS
  • Solaris Intel
  • Solaris Sparc
  • Android
Notes