is there a way to find users that are logged in to multiple windows machines at once ?
s
seph
09/28/2021, 7:39 PM
osquery is mostly a single node tool. It queries the local OS. So doing cross machine things generally happens your TLS server or log aggregation tools.
seph
09/28/2021, 7:40 PM
There are some exceptions in that extensions might query cross computer stuff. And To be honest. I have no idea if there’s an AD way to query who’s logged in across a domain.