ual

$ target-query <path/to/target> -f ual

Details

Module	os.windows.ual.UalPlugin
Output	records

Module documentation

Return all available User Access Log information.

User Access Logging (UAL) is a logging system that aggregates client usage data by role and products on a local server. It helps Windows server administrators to quantify requests from client computers for roles and services on a local server.

References:

• https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh849634%28v=ws.11%29

Function documentation

This is a namespace plugin. This means that by running this plugin, it will automatically run all other plugins under this namespace:

• ual.client_access

• ual.domains_seen

• ual.role_access

• ual.system_identities

• ual.virtual_machines