Has anyone sorted the nested group problem with regards to querying the Users and Groups table? I see this issue hasn't been touched in a while but thought i'd resurface.
https://github.com/osquery/osquery/issues/1762
Ultimate goal here is to identify users that inherit group membership due to the fact that their direct group membership entitles them to permissions inherited from a parent group of the direct group.
Example:
joe.user
is part of the
front desk
group
front desk
group is (in)correctly part of the
domain admins
therefore
joe.user
is part of the
domain admins
through nested group membership