groups

Print the groups a user is in. toybox

On Linux 1 Sigma rule name it

Linux

from the toybox, 0BSD

groups [user]

Print group memberships for a user.

Print group memberships for the current user

Trips 1 Sigma rule: lowLocal Groups Discovery Attempt - Linux by Ömer Günal, Alejandro Ortuno, oscd.community

Print group memberships for a list of users

groups username1 username2 ...Identify

Trips 1 Sigma rule: lowLocal Groups Discovery Attempt - Linux by Ömer Günal, Alejandro Ortuno, oscd.community

Sigma process creation rules that name groups

lowLocal Groups Discovery Attempt - LinuxÖmer Günal, Alejandro Ortuno, oscd.community