osQuery Management Server (Prime).Account Lockout Configurations (SQLite SQL Statements)
SELECT
path,
mode,
size,
mtime,
atime,
ctime
FROM file
WHERE path LIKE '/etc/pam.d/%'
AND (
path LIKE '%pam_tally%'
OR path LIKE '%faillock%'
OR path LIKE '%pam_faillock%'
);