go.mondoo.com/cnquery@v0.0.0-20231005093811-59568235f6ea/providers/os/resources/users/testdata/windows.toml (about) 1 [commands."powershell -c \"Get-LocalUser | ConvertTo-Json\""] 2 stdout = """ 3 [ 4 { 5 "AccountExpires": null, 6 "Description": "Built-in account for administering the computer/domain", 7 "Enabled": true, 8 "FullName": "", 9 "PasswordChangeableDate": "\\/Date(1586981519962)\\/", 10 "PasswordExpires": "\\/Date(1590610319962)\\/", 11 "UserMayChangePassword": true, 12 "PasswordRequired": true, 13 "PasswordLastSet": "\\/Date(1586981519962)\\/", 14 "LastLogon": "\\/Date(1587041759064)\\/", 15 "Name": "chris", 16 "SID": { 17 "BinaryLength": 28, 18 "AccountDomainSid": "S-1-5-21-2356735557-1575748656-448136971", 19 "Value": "S-1-5-21-2356735557-1575748656-448136971-500" 20 }, 21 "PrincipalSource": 1, 22 "ObjectClass": "User" 23 }, 24 { 25 "AccountExpires": null, 26 "Description": "A user account managed by the system.", 27 "Enabled": false, 28 "FullName": "", 29 "PasswordChangeableDate": null, 30 "PasswordExpires": null, 31 "UserMayChangePassword": true, 32 "PasswordRequired": false, 33 "PasswordLastSet": null, 34 "LastLogon": null, 35 "Name": "DefaultAccount", 36 "SID": { 37 "BinaryLength": 28, 38 "AccountDomainSid": "S-1-5-21-2356735557-1575748656-448136971", 39 "Value": "S-1-5-21-2356735557-1575748656-448136971-503" 40 }, 41 "PrincipalSource": 1, 42 "ObjectClass": "User" 43 }, 44 { 45 "AccountExpires": null, 46 "Description": "Built-in account for guest access to the computer/domain", 47 "Enabled": false, 48 "FullName": "", 49 "PasswordChangeableDate": null, 50 "PasswordExpires": null, 51 "UserMayChangePassword": false, 52 "PasswordRequired": false, 53 "PasswordLastSet": null, 54 "LastLogon": null, 55 "Name": "Guest", 56 "SID": { 57 "BinaryLength": 28, 58 "AccountDomainSid": "S-1-5-21-2356735557-1575748656-448136971", 59 "Value": "S-1-5-21-2356735557-1575748656-448136971-501" 60 }, 61 "PrincipalSource": 1, 62 "ObjectClass": "User" 63 }, 64 { 65 "AccountExpires": null, 66 "Description": "", 67 "Enabled": true, 68 "FullName": "sshd", 69 "PasswordChangeableDate": "\\/Date(1586981772559)\\/", 70 "PasswordExpires": null, 71 "UserMayChangePassword": true, 72 "PasswordRequired": true, 73 "PasswordLastSet": "\\/Date(1586981772559)\\/", 74 "LastLogon": null, 75 "Name": "sshd", 76 "SID": { 77 "BinaryLength": 28, 78 "AccountDomainSid": "S-1-5-21-2356735557-1575748656-448136971", 79 "Value": "S-1-5-21-2356735557-1575748656-448136971-1000" 80 }, 81 "PrincipalSource": 1, 82 "ObjectClass": "User" 83 }, 84 { 85 "AccountExpires": null, 86 "Description": "A user account managed and used by the system for Windows Defender Application Guard scenarios.", 87 "Enabled": false, 88 "FullName": "", 89 "PasswordChangeableDate": "\\/Date(1583556884172)\\/", 90 "PasswordExpires": "\\/Date(1587185684172)\\/", 91 "UserMayChangePassword": true, 92 "PasswordRequired": true, 93 "PasswordLastSet": "\\/Date(1583556884172)\\/", 94 "LastLogon": null, 95 "Name": "WDAGUtilityAccount", 96 "SID": { 97 "BinaryLength": 28, 98 "AccountDomainSid": "S-1-5-21-2356735557-1575748656-448136971", 99 "Value": "S-1-5-21-2356735557-1575748656-448136971-504" 100 }, 101 "PrincipalSource": 1, 102 "ObjectClass": "User" 103 } 104 ] 105 """ 106 107 [commands."wmic os get * /format:csv"] 108 stdout = """Node,BootDevice,BuildNumber,BuildType,Caption,CodeSet,CountryCode,CreationClassName,CSCreationClassName,CSDVersion,CSName,CurrentTimeZone,DataExecutionPrevention_32BitApplications,DataExecutionPrevention_Available,DataExecutionPrevention_Drivers,DataExecutionPrevention_SupportPolicy,Debug,Description,Distributed,EncryptionLevel,ForegroundApplicationBoost,FreePhysicalMemory,FreeSpaceInPagingFiles,FreeVirtualMemory,InstallDate,LargeSystemCache,LastBootUpTime,LocalDateTime,Locale,Manufacturer,MaxNumberOfProcesses,MaxProcessMemorySize,MUILanguages,Name,NumberOfLicensedUsers,NumberOfProcesses,NumberOfUsers,OperatingSystemSKU,Organization,OSArchitecture,OSLanguage,OSProductSuite,OSType,OtherTypeDescription,PAEEnabled,PlusProductID,PlusVersionNumber,PortableOperatingSystem,Primary,ProductType,RegisteredUser,SerialNumber,ServicePackMajorVersion,ServicePackMinorVersion,SizeStoredInPagingFiles,Status,SuiteMask,SystemDevice,SystemDirectory,SystemDrive,TotalSwapSpaceSize,TotalVirtualMemorySize,TotalVisibleMemorySize,Version,WindowsDirectory 109 VAGRANT,\\Device\\HarddiskVolume1,17763,Multiprocessor Free,Microsoft Windows Server 2019 Datacenter Evaluation,1252,1,Win32_OperatingSystem,Win32_ComputerSystem,,VAGRANT,-420,TRUE,TRUE,TRUE,3,FALSE,,FALSE,256,2,721716,979372,1922780,20190906065515.000000-420,,20190908011749.580533-420,20190908042731.608000-420,0409,Microsoft Corporation,4294967295,137438953344,{en-US},Microsoft Windows Server 2019 Datacenter Evaluation|C:\\Windows|\\Device\\Harddisk0\\Partition2,0,69,1,80,Vagrant,64-bit,1033,400,18,,,,,FALSE,TRUE,3,,00431-20000-00000-AA838,0,0,1179648,OK,400,\\Device\\HarddiskVolume2,C:\\Windows\\system32,C:,,3276340,2096692,10.0.17763,C:\\Windows 110 """ 111 112 [commands."powershell -c \"Get-ItemProperty -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion' -Name CurrentBuild, UBR, EditionID | ConvertTo-Json\""] 113 stdout=""" 114 { 115 "CurrentBuild": "17763", 116 "EditionID": "ServerDatacenterEval", 117 "UBR": 720 118 } 119 """