LocalUser
Field | Type | Possible Operators | Description |
---|---|---|---|
Guid | TEXT |
| A unique identifier that is a combination of GUID of selected |
FSName | TEXT |
| A special unique identifier that is a combination of the |
ObjectSid | TEXT |
| Local security identifier of object. |
Name | TEXT |
| Name of the specified object. |
IsEnabled | BOOLEAN |
| Indicates whether the user is enabled. |
HasNonExpiringPassword | BOOLEAN |
| Indicates whether the object's password is set to never expire. |
DontReqPasswd | BOOLEAN |
| Indicates whether the object's password can be blank. |
HasLocalService | BOOLEAN |
| Indicates whether the object has managing local services (without SPN). |
can_rdp | BOOLEAN |
| Indicates whether the local user can have enough privilege to connect with RDP (Remote Desktop Protocol) to the computer. |
can_exec_pwsh | BOOLEAN |
| Indicates whether the local user can have enough privilege to execute commands with Powershell on the computer. |
admin_to | BOOLEAN |
| Indicates whether the local user can have admin privilege on the computer. |
can_exec_dcom | BOOLEAN |
| Indicates whether the local user can have enough privilege to execute commands with DCOM(Distributed Component Object Model) protocol on the computer. |
inComputerName | TEXT |
| FSName of the computer that contains the local user. |
inLocalGroupName | TEXT |
| FSName of the local group that contains the local user. |
inComputerGuid | TEXT |
| Guid of the computer that contains the local user. |
IsPasswordExpired | BOOLEAN |
| Indicates whether the object's password is expired and should be changed. |
risk | NUMBER |
| The risk score of the object that calculated based on vulnerability counts and severities. |
inLocalGroupGuid | TEXT |
| Guid of the local group that contains the local user. |
Last updated