table for a bit more detail - thank you. Though the idea was to substitute the use of
command and have the information listed out using osquery. Looks like i'd also have to join on the
net user <id>
table for the username field.