Operating Systems

Operating System Resources

MQL resources for Operating System. Query and secure your infrastructure with cnspec.

Operating System

827 resources5,377 fields

Query operating systems for users, groups, packages, services, files, processes, and kernel and system settings across Linux, Windows, and macOS. Run cnspec scans to harden endpoints and servers, and measure systems against CIS Benchmarks and custom Mondoo Platform policies.

Learn how to secure Operating System with cnspec.

513 of 513 resources
·
os.any.aide

AIDE file integrity database

alias foraide
os.any.apparmor

AppArmor mandatory access control

alias forapparmor
os.any.auditpol

Windows audit policies

alias forauditpol
os.any.cgroups

Linux control groups (cgroup v2)

alias forcgroups
os.any.crontab

Crontab schedule on the system

alias forcrontab
os.any.exim

Exim mail transfer agent configuration

alias forexim
os.any.firewalld

firewalld dynamic firewall manager (RHEL/CentOS/Fedora)

alias forfirewalld
os.any.fstab

fstab persistent mount table

alias forfstab
os.any.iis

Internet Information Services web server

alias foriis
os.any.inetd

inetd super-server namespace

alias forinetd
os.any.ip6tables

IPv6 packet filter (ip6tables)

alias forip6tables
os.any.iptables

IPv4 packet filter (iptables)

alias foriptables
os.any.kernel

Running kernel and its modules

alias forkernel
os.any.launchd

macOS launchd job configurations

alias forlaunchd
os.any.limits

PAM resource limits configuration (limits.conf)

alias forlimits
os.any.logindefs

Shadow password suite (login.defs) configuration

alias forlogindefs
os.any.logrotate

logrotate configuration

alias forlogrotate
os.any.lsblk

Unix block devices (lsblk)

alias forlsblk
os.any.luks

LUKS-encrypted volumes on the host

alias forluks
os.any.lvm

Linux Logical Volume Manager

alias forlvm
os.any.macos

macOS-specific operating system surfaces

alias formacos
os.any.mdadm

Linux software RAID arrays (mdadm)

alias formdadm
os.any.modprobe

Kernel module configuration (modprobe.d)

alias formodprobe
os.any.mount

Unix mount table

alias formount
os.any.nfs

NFS service local state

alias fornfs
os.any.nftables

nftables firewall

alias fornftables
os.any.openBSMAudit

OpenBSM audit_control configuration (macOS and BSD)

alias foropenBSMAudit
os.any.ovs

Open vSwitch

alias forovs
os.any.polkit

Polkit authorization framework

alias forpolkit
os.any.postfix

Postfix mail transfer agent configuration

alias forpostfix
os.any.powershell

Result of running a PowerShell script on the system

alias forpowershell
os.any.registrykey

Windows registry key

alias forregistrykey
os.any.safari

Safari browser (macOS only)

alias forsafari
os.any.secpol

Windows local security policy

alias forsecpol
os.any.selinux

SELinux mandatory access control

alias forselinux
os.any.shadow

Shadow password file (/etc/shadow)

alias forshadow
os.any.snmpd

Net-SNMP daemon (snmpd) namespace

alias forsnmpd
os.any.sriov

SR-IOV network devices

alias forsriov
os.any.sshd

OpenSSH server (sshd) namespace

alias forsshd
os.any.sudo

Sudo binary and runtime metadata

alias forsudo
os.any.sudoers

sudo authorization configuration

alias forsudoers
os.any.sysrc

FreeBSD rc.conf system configuration

alias forsysrc
os.any.ufw

UFW (Uncomplicated Firewall) state and rules

alias forufw
os.any.usb

USB device inventory (experimental)

alias forusb
os.any.windows

Windows-specific operating system surfaces

alias forwindows
os.any.zfs

ZFS storage pools and datasets

alias forzfs
os.base.ai

AI Model Cache

alias forai
os.base.antigravity

Antigravity (Google) instance

alias forantigravity
os.base.apache2

Apache2 HTTP Server

alias forapache2
os.base.apt

Advanced Package Tool (APT) configuration

alias forapt
os.base.augment

Augment Code instance

alias foraugment
os.base.authorizedkeys

SSH authorized_keys file

os.base.bind9

BIND 9 DNS Server

alias forbind9
os.base.cassandra

Apache Cassandra Server

alias forcassandra
os.base.chrome

Chromium-family browsers (Chrome, Brave, Edge variants)

alias forchrome
os.base.cline

Cline AI agent instance

alias forcline
os.base.cloud

Cloud-asset metadata

alias forcloud
os.base.command

Result of running a shell command on the system

alias forcommand
os.base.containerd

containerd host

alias forcontainerd
os.base.continuedev

Continue (open-source AI coding assistant) instance

alias forcontinuedev
os.base.cursor

Cursor editor (AI-powered) instance

alias forcursor
os.base.docker

Docker host

alias fordocker
os.base.edr

Endpoint detection and response agents

alias foredr
os.base.file

File on the system

alias forfile
os.base.files

File search and discovery namespace

alias forfiles
os.base.firefox

Firefox-family browsers

alias forfirefox
os.base.gemini

Gemini CLI (Google) instance

alias forgemini
os.base.goose

Goose AI agent (Block) instance

alias forgoose
os.base.group

Group on the system

alias forgroup
os.base.haproxy

HAProxy load balancer

alias forhaproxy
os.base.ipAddress

IP address (v4 or v6) with networking details

alias foripAddress
os.base.jboss

JBoss EAP / WildFly application server

alias forjboss
os.base.jetbrains

JetBrains IDE plugins

alias forjetbrains
os.base.junie

Junie (JetBrains AI agent) instance

alias forjunie
os.base.kilocode

Kilo Code AI agent instance

alias forkilocode
os.base.kiro

Kiro CLI (AWS) instance

alias forkiro
os.base.kubelet

Kubernetes kubelet on this node

alias forkubelet
os.base.mariadb

MariaDB Server

alias formariadb
os.base.mdm

Mobile device management enrollment

alias formdm
os.base.mongodb

MongoDB Server

alias formongodb
os.base.mysql

MySQL Server

alias formysql
os.base.network

Network configuration of this system

alias fornetwork
os.base.nginx

Nginx HTTP Server

alias fornginx
os.base.openclaw

OpenClaw AI agent instance

alias foropenclaw
os.base.opencode

OpenCode AI coding assistant instance

alias foropencode
os.base.openhands

OpenHands AI agent instance (formerly OpenDevin)

alias foropenhands
os.base.package

Installed package on the platform or OS

alias forpackage
os.base.packages

All packages installed on the system

alias forpackages
os.base.pi

Pi AI agent instance

alias forpi
os.base.pkg

FreeBSD pkg configuration

alias forpkg
os.base.podman

Podman container engine

alias forpodman
os.base.port

Single TCP/UDP port on the system

alias forport
os.base.ports

All TCP/UDP ports on the system

alias forports
os.base.privatekey

Private key on disk

alias forprivatekey
os.base.process

Single process on the system

alias forprocess
os.base.processes

All processes running on the system

alias forprocesses
os.base.python

Python package inventory

alias forpython
os.base.roo

Roo Code editor instance

alias forroo
os.base.service

Service on the system

alias forservice
os.base.services

All services configured on the system

alias forservices
os.base.squid

Squid caching proxy

alias forsquid
os.base.tomcat

Apache Tomcat

alias fortomcat
os.base.trae

Trae AI assistant (ByteDance) instance

alias fortrae
os.base.user

User account on the system

alias foruser
os.base.vscode

Visual Studio Code (and forks)

alias forvscode
os.base.vulnmgmt

Asset vulnerability assessment

alias forvulnmgmt
os.base.warp

Warp AI terminal instance

alias forwarp
os.base.windsurf

Windsurf editor (Codeium) instance

alias forwindsurf
os.base.yum

Yum/DNF package manager

alias foryum
os.base.zed

Zed editor instance

alias forzed
os.linux.cgroups

Linux control groups (cgroup v2)

alias forcgroups
os.linux.limits

PAM resource limits configuration (limits.conf)

alias forlimits
os.linux.logindefs

Shadow password suite (login.defs) configuration

alias forlogindefs
os.linux.lsblk

Unix block devices (lsblk)

alias forlsblk
os.linux.luks

LUKS-encrypted volumes on the host

alias forluks
os.linux.lvm

Linux Logical Volume Manager

alias forlvm
os.linux.mdadm

Linux software RAID arrays (mdadm)

alias formdadm
os.linux.modprobe

Kernel module configuration (modprobe.d)

alias formodprobe
os.linux.ovs

Open vSwitch

alias forovs
os.linux.polkit

Polkit authorization framework

alias forpolkit
os.linux.selinux

SELinux mandatory access control

alias forselinux
os.linux.shadow

Shadow password file (/etc/shadow)

alias forshadow
os.linux.sriov

SR-IOV network devices

alias forsriov
os.macos.launchd

macOS launchd job configurations

alias forlaunchd
os.macos.macos

macOS-specific operating system surfaces

alias formacos
os.macos.openBSMAudit

OpenBSM audit_control configuration (macOS and BSD)

alias foropenBSMAudit
os.macos.safari

Safari browser (macOS only)

alias forsafari
os.macos.usb

USB device inventory (experimental)

alias forusb
os.unix.aide

AIDE file integrity database

alias foraide
os.unix.crontab

Crontab schedule on the system

alias forcrontab
os.unix.exim

Exim mail transfer agent configuration

alias forexim
os.unix.inetd

inetd super-server namespace

alias forinetd
os.unix.kernel

Running kernel and its modules

alias forkernel
os.unix.logrotate

logrotate configuration

alias forlogrotate
os.unix.mount

Unix mount table

alias formount
os.unix.nfs

NFS service local state

alias fornfs
os.unix.postfix

Postfix mail transfer agent configuration

alias forpostfix
os.unix.snmpd

Net-SNMP daemon (snmpd) namespace

alias forsnmpd
os.unix.sshd

OpenSSH server (sshd) namespace

alias forsshd
os.unix.sudo

Sudo binary and runtime metadata

alias forsudo
os.unix.sudoers

sudo authorization configuration

alias forsudoers
os.unix.sysrc

FreeBSD rc.conf system configuration

alias forsysrc
os.unix.zfs

ZFS storage pools and datasets

alias forzfs
os.windows.auditpol

Windows audit policies

alias forauditpol
os.windows.iis

Internet Information Services web server

alias foriis
os.windows.powershell

Result of running a PowerShell script on the system

alias forpowershell
os.windows.registrykey

Windows registry key

alias forregistrykey
os.windows.secpol

Windows local security policy

alias forsecpol
os.windows.windows

Windows-specific operating system surfaces

alias forwindows

Schema version: 2026-09-23 · 513 resources