Hey guys, total noobie here, is there a way to get the password policies on Windows/Linux by using osquery? Like the minimum password length and whatnot. Mainly for compliance checking. Thanks!

Not sure but on windows you can use this:

SELECT SPLIT(key,'\\', 6) PROPERTY, data FROM REGISTRY WHERE PATH LIKE 'HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\PolicyManager\default\DeviceLock\%\value';

Oh, thanks! This seems to work but the MinDevicePasswordLength shows 4 while the 'net accounts' command shows 8, any idea?

no idea, but you can check this out here : https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock there's also few compliance cases on the nav bar you can look out for

A quick glance it seems like I need something called "Mobile Device Management" enabled for the DeviceLock to work.. hmm Nevertheless, thank you for your help!