w
Show who is logged on and since how long they logged in. toybox
On Linux, macOS 3 Sigma rules name it
Linux
wSeveral platforms
Display who is logged in and their processes.
Display information about all users who are currently logged in
Trips 3 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; lowLocal System Accounts Discovery Attempt - Linux by Alejandro Ortuno, oscd.community, CheraghiMilad; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
Display information about a specific user
w usernameIdentifyTrips 3 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; lowLocal System Accounts Discovery Attempt - Linux by Alejandro Ortuno, oscd.community, CheraghiMilad; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
Display logged-in user information without a header
w --no-headerIdentifyTrips 3 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; lowLocal System Accounts Discovery Attempt - Linux by Alejandro Ortuno, oscd.community, CheraghiMilad; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
Display information without including the login, JCPU, and PCPU columns
w --shortIdentifyTrips 3 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; lowLocal System Accounts Discovery Attempt - Linux by Alejandro Ortuno, oscd.community, CheraghiMilad; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
macOS
Show who is logged on and what they are doing. Print user login, TTY, remote host, login time, idle time, current process.
Show logged-in users information
Trips 3 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; lowLocal System Accounts Discovery Attempt - Linux by Alejandro Ortuno, oscd.community, CheraghiMilad; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
Show logged-in users information without a header
w -hIdentifyTrips 3 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; lowLocal System Accounts Discovery Attempt - Linux by Alejandro Ortuno, oscd.community, CheraghiMilad; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
Show information about logged-in users, sorted by their idle time
w -iIdentifyTrips 3 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; lowLocal System Accounts Discovery Attempt - Linux by Alejandro Ortuno, oscd.community, CheraghiMilad; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community