Does anybody know of, or have, an extension for osquery that collects user/group information from an Active Directory server and presents it as a table?

I am pretty sure the native users table ran on a domain controller can return this info, my knowledge is really out of date for on prem AD

Hey, you are correct that the users table does return limited info about the users. I'm looking to collect all the kinds of info somehting like get-adusers might give; like if the account is active, failed password count, etc.

@simon herbst iirc you can get this data using Kolide's

kolide_wmi

table to retrieve the corresponding WMI class

Thanks! will take a look