osQuery Management Server (Prime).Osquery User List by IT Layer (SQLite SQL Statements)


          SELECT 
            p.pid, 
            p.name, 
            u.username, 
            p.path, 
            p.cmdline 
          FROM processes p
          JOIN users u ON p.uid = u.uid
          WHERE 
            p.name LIKE '%nginx%' OR 
            p.name LIKE '%apache%' OR 
            p.name LIKE '%postgres%' OR 
            p.name LIKE '%mysqld%' OR 
            p.name LIKE '%ssh%' OR 
            p.name LIKE '%vpn%';