| Guid |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A unique identifier that is a combination of GUID of selected Scan and random GUID. |
| FSName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A special unique identifier that is a combination of the Name of the object and the FSName of the computer that contains local user. |
| ObjectSid |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Local security identifier of object. |
| Name |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Name of the specified object. |
| IsEnabled |
BOOLEAN |
N/A (toggle) |
Indicates whether the user is enabled. |
| HasNonExpiringPassword |
BOOLEAN |
N/A (toggle) |
Indicates whether the object’s password is set to never expire. |
| DontReqPasswd |
BOOLEAN |
N/A (toggle) |
Indicates whether the object’s password can be blank. |
| HasLocalService |
BOOLEAN |
N/A (toggle) |
Indicates whether the object has managing local services (without SPN). |
| can_rdp |
BOOLEAN |
N/A (toggle) |
Indicates whether the local user can have enough privilege to connect with RDP (Remote Desktop Protocol) to the computer. |
| can_exec_pwsh |
BOOLEAN |
N/A (toggle) |
Indicates whether the local user can have enough privilege to execute commands with Powershell on the computer. |
| admin_to |
BOOLEAN |
N/A (toggle) |
Indicates whether the local user can have admin privilege on the computer. |
| can_exec_dcom |
BOOLEAN |
N/A (toggle) |
Indicates whether the local user can have enough privilege to execute commands with DCOM(Distributed Component Object Model) protocol on the computer. |
| inComputerName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
FSName of the computer that contains the local user. |
| inLocalGroupName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
FSName of the local group that contains the local user. |
| inComputerGuid |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Guid of the computer that contains the local user. |
| IsPasswordExpired |
BOOLEAN |
N/A (toggle) |
Indicates whether the object’s password is expired and should be changed. |
| risk |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
The risk score of the object that calculated based on vulnerability counts and severities. |
| inLocalGroupGuid |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Guid of the local group that contains the local user. |
| IsDomainUser |
BOOLEAN |
N/A (toggle) |
That indicates whether a user account belongs to a domain or is a local account. |
| ExposurePoint |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
ExposurePoint: A numerical value indicating the level of risk or exposure. |
| Tier |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
Tier level Forestall assigned to the object: 0 (Tier 0), 1 (Tier 1) or 2 (Tier 2). Lower is more privileged. |