Querying BitLocker status on a certain endpoint

tmeksik — Wed, 13 Dec 2023 09:49:09 GMT

I am aware of "Disk Encryption Visibility" where we can see the encryption status all volumes under any endpoints. But it appears we can't filter on this field (Volumes Status).

Is there any way at all to programmatically answer a simple question like 'is volume X on endpoint Y encrypted?' or 'what endpoints don't have all volumes encrypted?' without going to "Disk Encryption Visibility" and look for such info manually?

Re: Querying BitLocker status on a certain endpoint

aspatil — Thu, 14 Dec 2023 12:24:27 GMT

Hello @tmeksik ,

Thank you for writing to live community.

Unfortunately we do not have the dataset to check the same information and I understand that you cannot filter on Volume status and neither you can export the table to filter in spreadsheet. Hence, I would suggest you to open a TAC case to raise a feature request to enable the filter or have the export option.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

Regards

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

topic Re: Querying BitLocker status on a certain endpoint in Cortex XDR Discussions

Querying BitLocker status on a certain endpoint

Re: Querying BitLocker status on a certain endpoint