add query to get the current logged-in user

Signed-off-by: Patrick Münch <[email protected]>
mondoohq · Apr 10, 2024 · d8dae2e · d8dae2e
1 parent 48b2b67
commit d8dae2e
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 4 deletions.
diff --git a/core/mondoo-linux-inventory.mql.yaml b/core/mondoo-linux-inventory.mql.yaml
@@ -4,7 +4,7 @@
 packs:
   - uid: mondoo-linux-inventory
     name: Linux Inventory Pack
-    version: 1.6.0
+    version: 1.6.1
     license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
@@ -159,4 +159,7 @@ packs:
           asset.family.contains('linux')
           packages.where(name == /xorg|xserver|wayland/i).any(installed)
         mql: |
-          command('lsblk').stdout
+          command('lsblk').stdout
+      - uid: mondoo-linux-logged-in-users
+        title: Logged-in users
+        mql: command('users').stdout
diff --git a/core/mondoo-macos-inventory.mql.yaml b/core/mondoo-macos-inventory.mql.yaml
@@ -4,7 +4,7 @@
 packs:
   - uid: mondoo-macos-inventory
     name: macOS Inventory Pack
-    version: 1.4.0
+    version: 1.4.1
     license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
@@ -129,3 +129,6 @@ packs:
         title: Configuration Profile Data
         mql: |
           parse.json(content: command('system_profiler SPConfigurationProfileDataType -json').stdout).params
+      - uid: mondoo-macos-logged-in-users
+        title: Logged-in users
+        mql: command('users').stdout
diff --git a/core/mondoo-windows-inventory.mql.yaml b/core/mondoo-windows-inventory.mql.yaml
@@ -4,7 +4,7 @@
 packs:
   - uid: mondoo-windows-asset-inventory
     name: Windows Asset Inventory Pack
-    version: 1.6.0
+    version: 1.6.1
     license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
@@ -133,3 +133,7 @@ packs:
         title: Scheduled tasks
         mql: |
           parse.json(content: powershell("Get-ScheduledTask | ConvertTo-Json").stdout).params
+      - uid: mondoo-windows-logged-in-users
+        title: Logged-in users
+        mql: |
+          parse.json(content: powershell("Get-Process -IncludeUserName explorer | Select-Object Username | ConvertTo-Json").stdout).params