# Filesystem Info

## Overview

**Evidence:** Filesystem Info\
**Description:** ESXi Filesystem Info\
**Category:** DiskFilesystem\
**Platform:** esxi\
**Short Name:** fsinfo\
**Is Parsed:** Yes\
**Sent to Investigation Hub:** Yes\
**Collect File(s):** No

## Background

ESXi filesystem listings show datastores and mount points, including capacity and free space. This informs where VMs and logs reside and whether storage constraints affect behavior.

## Data Collected

This collector gathers structured data about filesystem info.

### Filesystem Info Data

| Field        | Description | Example       |
| ------------ | ----------- | ------------- |
| `MountPoint` | Mount Point | Example value |
| `VolumeName` | Volume Name | Example value |
| `UUID`       | UUID        | Example value |
| `Mounted`    | Mounted     | Example value |
| `Type`       | Type        | Example value |
| `Size`       | Size        | 123           |
| `Free`       | Free        | 123           |

## Collection Method

This collector parses esxcli storage filesystem list output captured in a text file, extracting mount points, UUIDs, types, and size/free metrics.

## Forensic Value

Filesystem context supports locating evidence, understanding storage layout, and correlating VM activity with datastore resources.