Or maybe you want to know if a user has a restricted shell like /bin/false. For instance, you might want to know if a user has set their shell to something other than the default. You can use this value to query the system for details about a specific user’s shell. You can use this value to query the system for information about a specific user’s files and location. D irectory – The user’s home directory.You can use this value and the User ID to query the system for information about a specific user. username – The username associated with the account.You can use this value to query the system for information about users’ privileges.
uid_signed – The User ID for which the Group ID is valid.You can use either of these values to query the system for information about a specific user or group.
Related: How to Install Ubuntu 20.04 Installing OSQuery on Ubuntu This guide uses Ubuntu 20.04, but any other Linux-based system will also work. If you’d like to follow along, be sure you have a Linux-based system. This tutorial will be a hands-on demonstration.