![]() ![]() | 20 | 20 | NETWORK SERVICE | | %systemroot%\ServiceProfiles\NetworkService | | 19 | 19 | LOCAL SERVICE | | %systemroot%\ServiceProfiles\LocalService | | 18 | 18 | SYSTEM | | %systemroot%\system32\config\systemprofile | | 504 | 513 | WDAGUtilityAccount | A user account managed and used by the system for Windows Defender Application Guard scenarios. | 501 | 546 | Guest | Built-in account for guest access to the computer/domain | | | 503 | 581 | DefaultAccount | A user account managed by the system. | 500 | 544 | Administrator | Built-in account for administering the computer/domain | | | uid | gid | username | description | directory | Running queries against available tables, e.g user select uid,gid,username,description,directory from users - - - - - timer ON|OFF Turn the CPU timer measurement on or off width Set column widths for "column" mode types Show result of getQuerċolumns for the given query show Show the current values for various settings socket Show the local osquery extensions socket path separator STR Change separator used by output mode nullvalue STR Use STRING in place of NULL values Pretty Pretty printed SQL results (default) mode MODE Set output mode where MODE is one of: headers ON|OFF Turn display of headers on or off features List osquery's features and their statuses disconnect Disconnect from a connected extension socket connect PATH Connect to an osquery extension socket You are connected to a transient 'in-memory' virtual database.
0 Comments
Leave a Reply. |