I’ve been trying to figure out if there is a way to query the status of a user’s password on OS X (using osquery). You can query the various authentication databases for their settings, but there doesn’t seem to be a way to actually see password data like you could if you were polling locally using some of the OS X utilities.