who
Print information about logged in users. toybox
On Linux 3 Sigma rules name it
Linux
whoSeveral platforms
Display who is logged in and related data (processes, boot time).
Display the username, line, and time of all currently logged-in sessions
whoIdentifyTrips 2 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
Display all available information
who --allIdentifyTrips 2 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
Display all available information with table headers
who --all --headingIdentifyTrips 2 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
Display information only for the current terminal session
who am iIdentifyTrips 2 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community
Display help
who --helpIdentifyTrips 2 Sigma rules: lowLocal System Accounts Discovery - MacOs by Alejandro Ortuno, oscd.community; informationalSystem Network Connections Discovery - MacOs by Daniil Yugoslavskiy, oscd.community