Built off the open source project Osquery
Description: Users that are currently logged on.
What The Data Shows: See who is performing specific actions on a workstation.
WHERE Logon_Type like "Interactive" AND Logon_Server <> "";
Hey @cstamand appreciate your contribution! We'll vet this submission and if it runs as expected we'll change this status of your query from Under Review to CB Approved.
Awesome! Thank you for submitting.
Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.