https://github.com/osquery/osquery logo
Title
a

Antoinette

06/26/2020, 6:46 PM
Would I be correct in thinking that the users table is limited in that it doesn't identify LDAP users on the box?
t

theopolis

06/27/2020, 11:42 PM
I think it depends on the NSS configuration. The osquery table uses the getent API to enumerate all local databases.