https://github.com/osquery/osquery logo
#general
Title
# general
w

Woogs

09/29/2018, 12:42 AM
Can someone help me understand this discrepancy? I purposely added a seconded user to a linux system with a uid of 0. Putting a
where uid="0"
only returns my root user.
where uid_signed="0"
gets me both users. This doesn't seem right to me
Just bumping this question from Friday. Am I missing anything here on why this query isn't returning correctly?
5 Views