Hard Drive Audit - Mac - superseded
Log In or Register to download the BES file, and more.

3 Votes

Versioning - This is an older version.

1Hard Drive Audit - Mac5/28/2013 10:18:50 AM
2Hard Drive Audit - Mac7/15/2014 7:05:30 AM
3Hard Drive Audit - Mac6/19/2018 12:23:11 PM

Description

Analysis to gather various Hard Drive information including serial number, firmware, media type, etc. on Mac OS computers.

Last Modified: 7/15/2014
Author: Kerry Tobin


Property Details

ID2994666
StatusProduction - Fully Tested and Ready for Production
TitleHard Drive Audit - Mac
DomainBESC
Added by on 7/15/2014 7:05:30 AM
Last Modified by on 7/15/2014 7:05:30 AM
Counters 5296 Views / 11 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 1 rating. ** Log In or Register to add your rating.

Properties

Drive Model
Period 7 days
 
  * Results in a true/false
Show indented relevance
strings of values of entries whose (key of it = "Model") of dictionaries of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it ="RP01")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry
Hard Drive Serial Numbers
Period 7 days
 
  * Results in a true/false
Show indented relevance
strings of values of entries whose (key of it = "Serial Number") of dictionaries of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it ="RP01")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry
Drive Firmware
Period 7 days
 
  * Results in a true/false
Show indented relevance
strings of values of entries whose (key of it = "Revision") of dictionaries of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it ="RP01")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry
Total Free Space of System Drive
Period 6 hours
 
  * Results in a true/false
Show indented relevance
((free space of filesystem of folder "/") / (1024*1024*1024)) as string & " GB"
Total Used Space of System Drive
Period 6 hours
 
  * Results in a true/false
Show indented relevance
(((size of filesystem of folder "/") - (free space of filesystem of folder "/")) / (1024*1024*1024)) as string & " GB"
% Free Space of System Drive
Period 6 hours
 
  * Results in a true/false
Show indented relevance
free percent of filesystem of folder "/"
Size of TEM DL Cache
Period 1 day
 
  * Results in a true/false
Show indented relevance
if exists (folder "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__Cache") then ((sum of sizes of descendants of folder "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__Cache") / (1024 * 1024)) as string & " MB" else "<none>"
Size of tmp Folder
Period 1 day
 
  * Results in a true/false
Show indented relevance
if exists (folder "/tmp") then ((sum of sizes of descendants of folder "/tmp") / (1024 * 1024)) as string & " MB" else "<none>"
Physical Block Size
Period 7 days
 
  * Results in a true/false
Show indented relevance
integers of values of entries whose (key of it = "Physical Block Size") of dictionaries of nodes whose (name of it = "AppleAHCIDiskDriver") of nodes whose (name of it = "IOAHCIDevice") of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it ="RP01")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry
Media Type
Period 7 days
 
  * Results in a true/false
Show indented relevance
strings of values of entries whose (key of it = "Medium Type") of dictionaries of values of entries whose (key of it = "Device Characteristics") of dictionaries of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it ="RP01")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry
Native Command Queuing
Period 7 days
 
  * Results in a true/false
Show indented relevance
booleans of values of entries whose (key of it = "NCQ") of dictionaries of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it ="RP01")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry
Queue Depth
Period 7 days
 
  * Results in a true/false
Show indented relevance
integers of values of entries whose (key of it = "Queue Depth") of dictionaries of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of nodes of nodes of node "SATA" of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry
Interconnect
Period 7 days
 
  * Results in a true/false
Show indented relevance
strings of values of entries whose (key of it = "Physical Interconnect") of dictionaries of values of entries whose (key of it = "Protocol Characteristics") of dictionaries of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it ="RP01")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry
TRIM
Period 2 days
 
  * Results in a true/false
Show indented relevance
if (system version >= "10.7") then ((if (exists boolean of values of it) then ((boolean of values of it) as string) else ("UNKNOWN" as string)) of entries whose (key of it = "Unmap") of dictionaries of values of entries whose (key of it = "IOStorageFeatures") of dictionaries of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it ="RP01")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry) else ("<unsupported os>" as string)
Drive RPM
Period Every Report
 
  * Results in a true/false
Show indented relevance
integers of values of entries whose (key of it = "Rotation Rate") of dictionaries of values of entries whose (key of it = "Device Characteristics") of dictionaries of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it ="RP01")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry

Relevance

Used in 4 analyses   * Results in a true/false
Show indented relevance
(it = "i386" OR it = "x86_64") of architecture of operating system
Used in 2 analyses   * Results in a true/false
Show indented relevance
name of operating system contains "Mac OS X"

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!
kerryt9455 -
Significantly updated to work with much more modern hardware and also added support for at least some old Xserve models as well.
rustymyers -
On newer Macs, we need to look at all RP nodes for hard drive info. I suggest: s/name of it ="RP01"/name of it starts with "RP"/g
kerryt9455 -
Added in TRIM (works on machines I've tested), RPM where available and now functions with newer PCIe based Apple drives. Still haven't figured out a way to get SMART status.
jgstew -
I'd love to see SMART & TRIM as well.
kerryt9455 -
I'd love to figure out how to add SMART and TRIM status to this if anyone has any ideas.