Filesystem Info

Overview

Evidence: Filesystem Info Description: ESXi Filesystem Info Category: DiskFilesystem Platform: esxi Short Name: fsinfo Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

ESXi filesystem listings show datastores and mount points, including capacity and free space. This informs where VMs and logs reside and whether storage constraints affect behavior.

Data Collected

This collector gathers structured data about filesystem info.

Filesystem Info Data

Field	Description	Example
MountPoint	Mount Point	Example value
VolumeName	Volume Name	Example value
UUID	UUID	Example value
Mounted	Mounted	Example value
Type	Type	Example value
Size	Size	123
Free	Free	123

Collection Method

This collector parses esxcli storage filesystem list output captured in a text file, extracting mount points, UUIDs, types, and size/free metrics.

Forensic Value

Filesystem context supports locating evidence, understanding storage layout, and correlating VM activity with datastore resources.