ual.system_identities

$ target-query <path/to/target> -f ual.system_identities

Details

Module	os.windows.ual.UalPlugin
Output	records

Module documentation

Return all available User Access Log information.

User Access Logging (UAL) is a logging system that aggregates client usage data by role and products on a local server. It helps Windows server administrators to quantify requests from client computers for roles and services on a local server.

References:

• https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh849634%28v=ws.11%29

Function documentation

Return system identity data within the User Access Logs.