OSQueryLoggedInUsers Deprecated

Deprecated. Use OSQueryBasicQuery with query='select liu.*, p.name, p.cmdline, p.cwd, p.root from logged_in_users liu, processes p where liu.pid = p.pid;' instead.

python · OS Query

Details

ID	`OSQueryLoggedInUsers`
Language	python
From Version	6.0.0
Docker Image	`demisto/python:2.7.18.24398`
Tags	OSQuery

README

Deprecated. Use OSQueryBasicQuery with query=’select liu.*, p.name, p.cmdline, p.cwd, p.root from logged_in_users liu, processes p where liu.pid = p.pid;’ instead.

Script Data

Name	Description
Script Type	python2
Tags	OSQuery
Cortex XSOAR Version	5.0.0

Dependencies

This script uses the following commands and scripts.

OSQueryBasicQuery

Inputs

Argument Name	Description
system	The System to remote execute on, can be a list of systems

Outputs

There are no outputs for this script.

Source

OSQueryLoggedInUsers.py OSQueryLoggedInUsers.yml

Download History Raw

commonfields:
  id: OSQueryLoggedInUsers
  version: -1
name: OSQueryLoggedInUsers
script: ''
type: python
subtype: python2
tags:
- OSQuery
deprecated: true
comment: "Deprecated. Use OSQueryBasicQuery with query='select liu.*, p.name, p.cmdline, p.cwd, p.root from logged_in_users liu, processes p where liu.pid = p.pid;' instead."
system: true
args:
- name: system
  required: true
  default: true
  description: The System to remote execute on, can be a list of systems
scripttarget: 0
dependson:
  must:
  - OSQueryBasicQuery
timeout: 0s
fromversion: 6.0.0
dockerimage: demisto/python:2.7.18.24398
tests:
- No tests (auto formatted)