https://github.com/osquery/osquery logo
#general
Title
# general
m

Mayan

12/01/2021, 4:02 PM
Is it possible to request a particular table in osquery for example the current memberships of a user account or is there an existing table that already captures that information?
z

zwass

12/01/2021, 4:04 PM
Perhaps
user_groups
?
m

Mayan

12/01/2021, 4:19 PM
Oh Doh. Which would then require a join with
groups
table for a bit more detail - thank you. Though the idea was to substitute the use of
net user <id>
command and have the information listed out using osquery. Looks like i'd also have to join on the
users
table for the username field.
3 Views