Filesystem Info
Overview
Section titled “Overview”Evidence: Filesystem Info
Description: ESXi Filesystem Info
Category: DiskFilesystem
Platform: esxi
Short Name: fsinfo
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No
Background
Section titled “Background”ESXi filesystem listings show datastores and mount points, including capacity and free space. This informs where VMs and logs reside and whether storage constraints affect behavior.
Data Collected
Section titled “Data Collected”This collector gathers structured data about filesystem info.
Filesystem Info Data
Section titled “Filesystem Info Data”| Field | Description | Example |
|---|---|---|
MountPoint | Mount Point | Example value |
VolumeName | Volume Name | Example value |
UUID | UUID | Example value |
Mounted | Mounted | Example value |
Type | Type | Example value |
Size | Size | 123 |
Free | Free | 123 |
Collection Method
Section titled “Collection Method”This collector parses esxcli storage filesystem list output captured in a text file, extracting mount points, UUIDs, types, and size/free metrics.
Forensic Value
Section titled “Forensic Value”Filesystem context supports locating evidence, understanding storage layout, and correlating VM activity with datastore resources.