https://github.com/osquery/osquery logo
#general
Title
# general
r

Reza Kazemy

12/05/2022, 4:41 PM
Hi. How can I check if a password has been set for a system in windows or macOS client with osquery?? I would appreciate it if someone can help me find a related query.
Here are some related queries to check for disk encryption
s

seph

12/06/2022, 3:14 PM
I think the question is about whether a password is set, not disk encryption?
g

Guillaume

12/06/2022, 4:08 PM
For macOS, I would recommend checking out the password_policy table @Reza Kazemy -> https://osquery.io/schema/5.5.1/#password_policy
As for Windows, this table will contain the info you want:
security_profile_info
- it has been merged recently (https://github.com/osquery/osquery/pull/7794) and should appear in a future release of osquery in the not too distant future 🙂
r

Reza Kazemy

12/07/2022, 9:10 AM
Thank you so much.
@Guillaume @seph @Rachel Perkins
2 Views