Is it possible to request a particular table in os...
# general
m
Is it possible to request a particular table in osquery for example the current memberships of a user account or is there an existing table that already captures that information?
z
Perhaps
user_groups
?
m
Oh Doh. Which would then require a join with
groups
table for a bit more detail - thank you. Though the idea was to substitute the use of
net user <id>
command and have the information listed out using osquery. Looks like i'd also have to join on the
users
table for the username field.