The attributes that Linux uses to identify user information.
- Extension:
linux
Attributes
Section titled “Attributes”group
- Type:
group - Requirement: recommended
The group under which this process is running.
auid
- Type:
integer_t - Requirement: optional
The audit user assigned at login by the audit subsystem.
egid
- Type:
integer_t - Requirement: optional
The effective group under which this process is running.
euid
- Type:
integer_t - Requirement: optional
The effective user under which this process is running.
Available In
Section titled “Available In”account_changeadmin_group_queryapi_activityapplication_lifecycleauthenticationauthorize_sessioncompliance_findingconfig_statedata_security_findingdatastore_activitydetection_findingdevice_config_state_changedhcp_activitydns_activityemail_activityemail_file_activityemail_url_activityentity_managementfile_activityfile_hostingfile_queryfolder_queryftp_activitygroup_managementhttp_activityinventory_infojob_querykernel_activitykernel_extensionkernel_object_querymemory_activitymodule_activitymodule_querynetwork_activitynetwork_connection_querynetwork_file_activitynetworks_queryntp_activityperipheral_device_queryprocess_activityprocess_queryrdp_activityscan_activityscheduled_job_activitysecurity_findingservice_querysession_querysmb_activityssh_activitytunnel_activityuser_accessuser_inventoryuser_queryvulnerability_findingweb_resource_access_activityweb_resources_activitywin/prefetch_querywin/registry_key_activitywin/registry_key_querywin/registry_value_activitywin/registry_value_querywin/resource_activity