search

JupiterOne-Archives / integrations-2021-07-16

JupiterOne integration development documentation and issue tracking
0 stars 2 forks source link

`encrypted: boolean` property is not reflecting state of boot device #49

Closed aiwilliams closed 3 years ago

aiwilliams commented 3 years ago

Given the following storage computer details:

      "storage": [
        {
          "disk": "disk0",
          "model": "APPLE SSD SM1024L",
          "revision": "CXS5EA0Q",
          "serial_number": "REDACTED",
          "size": 1000555,
          "drive_capacity_mb": 1000555,
          "connection_type": "NO",
          "smart_status": "Verified",
          "partitions": [
            {
              "name": "Macintosh HD (Boot Partition)",
              "size": 1000240,
              "type": "boot",
              "partition_capacity_mb": 1000240,
              "percentage_full": 5,
              "available_mb": 207295,
              "filevault_status": "Encrypted",
              "filevault_percent": 100,
              "filevault2_status": "Encrypted",
              "filevault2_percent": 100,
              "boot_drive_available_mb": 207295,
              "lvgUUID": "",
              "lvUUID": "",
              "pvUUID": ""
            },
            {
              "name": "Data",
              "size": 1000240,
              "type": "other",
              "partition_capacity_mb": 1000240,
              "percentage_full": 79,
              "available_mb": 207295,
              "filevault_status": "Encrypted",
              "filevault_percent": 100,
              "filevault2_status": "Encrypted",
              "filevault2_percent": 100
            }
          ]
        }

encrypted is false, should be true.