The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

InstalledDrivers collector

  • Published on Sep 3, 2026
  • 1 minute(s) read
Prev Next

The InstalledDrivers collector shows details about drivers installed on managed devices.

Collector output

Field

Type

Description

displayname

String

The display name for the driver.

description

String

A description for the driver.

last_modified_date

Timestamp

A date-time value indicating when the driver was last modified.

name

String

A short name that uniquely identifies the driver.

servicetype

String

The type of service provided to calling processes.

startmode

String

The driver start-up mode.

  • Boot — the driver is started by the operating system loader.

  • System — the driver is started by the operating system.

  • Automatic — the driver starts automatically at system startup.

  • Manual — the driver starts by the service control manager. The service control manager also allows to manually start the driver.

  • Disabled — the driver can no longer be started.

state

String

The current state of the driver.

path

String

The fully qualified path to the driver file.



Supported versions

Windows

Linux

macOS

3.0 and later

3.0 and later

3.0 and later



Example: Show drivers which are disabled on devices.
InstalledDrivers where InstalledDrivers state equals "disabled"