The LocalGroups collector gathers data on local system groups. Access Directory groups are not returned.
Collector output
Field | Type | Description |
|---|---|---|
groupname | String | The name of the group. |
groupdomain | String | The domain name of the local group. |
groupdescription | String | The description of the local group. |
islocal | String | Confirms that the group is stored locally on the device. |
sid | String | The security identifier for the group. |
Example: Show local groups under the "corp.sensitive" domain.
LocalGroups where LocalGroups groupdomain contains "corp.sensitive"