Press CTRL+K to open search

NetworkShares collector

  • Published on Sep 3, 2026
  • 1 minute(s) read
Prev Next

The NetworkShares collector finds network shared paths accessible from each managed device.

Collector output

Field

Type

Description

name

String

Name of shared resource.

description

String

Description of shared resource set either by the user or by default.

path

String

Local path to the resource.



Important

When Samba service is started, only resources configured at /etc/samba/smb.conf are returned by the collector. It obtains information of the Network File System (NFS) from file /etc/samba/smb.conf.

Supported versions

Windows

Linux

macOS

3.0 and later

3.0 and later

3.0 and later



Example: Show which paths on device "owilde-office" are being shared
NetworkShares path where HostEntries hostname equals "owilde-office"


Example: Show which paths on device "owilde-office" are being shared
NetworkShares path where HostEntries hostname equals "owilde-office"


Related articles
  • NetworkShares collector
    Endpoint Detection and Response with Forensics (EDRF) > Investigate potential threats with EDRF > Conduct searches > Search real-time data of endpoints for investigation and threat hunting > Collecting device data for real-time search > Built-in collectors
  • NetworkSessions collector
    Endpoint Detection and Response with Forensics (EDRF) > Investigate potential threats with EDRF > Conduct searches > Search real-time data of endpoints for investigation and threat hunting > Collecting device data for real-time search > Built-in collectors
  • NetworkSessions collector
    Endpoint Detection and Response (EDR) > Endpoint Detection and Response Product Guide > Collecting device data for real-time search > Built-in collectors