> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/enum/windows-discovery/windows-user-information.md). # Windows User Information ## Command history ### cmd.exe command history Get current command history in cmd.exe ```batch doskey.exe /history ``` ### Get-PSReadline module history Get the name of the history log file ```powershell (Get-PSReadlineOption).HistorySavePath ``` The default location is \ `C:\Users\\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadLine\ ConsoleHost_history.txt` ### PowerShell command history Get current command history in PowerShell ```powershell Get-History ``` ## Current user information ### Current user info in cmd.exe Display current username in cmd.exe ```batch echo %USERNAME% ``` ### Current user info in PowerShell Display current username in PowerShell ```powershell $env:username ``` ### Current user info with whoami.exe List username of current user ``` whoami ``` List username and SID of current user ``` whoami /user ``` Displays the user groups to which the current user belongs ``` whoami /groups ``` Displays the security privileges of the current user ``` whoami /priv ``` Display all user information ``` whoami /all ``` ## List user information ### List user info with Get-LocalUser List information for specified local user ```powershell Get-LocalUser -Name | select * ``` List username, full name and description of all local users ```powershell Get-LocalUser | Select-Object Name, Fullname, Description ``` List username, enabled or not, last logon time and SID of all local users ```powershell Get-LocalUser | Format-Table Name, Enabled, LastLogon, SID ``` ### List user info with net.exe List all local users ``` net user ``` Displays username, password expiration information, logon script, user profile, home directory, and group membership for the user ``` net user ``` ## Group information ### Group information with net.exe List all local groups ``` net localgroup ``` ## Resources Get-LocalUser - Microsoft Learn: net user - Microsoft Learn: whoami - Microsoft Learn: