Skip to content

FS_SysInfo_Users

Jump to bottom
ufrisk edited this page Mar 2, 2023 · 2 revisions

The sys/users directory

The directory sys/users exists as a sub-directory to the file system root.

The directory contains information about the users on the system.

The files in the sys/users directory are listed in the table below:

File Description
net/users.txt Information about the users on the system.

Files in the sys/users directory are read-only.

File: net/users.txt

   # Username                         SID
-----------------------------------------
0000 SANSDFIR                         S-1-5-21-1552841522-3835366585-4197357653-1001
...

Example

The example shows the sys/users directory and the file users.txt

For Developers

The sys/users sub-directory is implemented as a built-in native C-code plugin. The plugin source is located in the file modules/m_sys_user.c in the vmm project.

Sponsor PCILeech and MemProcFS:

PCILeech and MemProcFS is free and open source!

I put a lot of time and energy into PCILeech and MemProcFS and related research to make this happen. Some aspects of the projects relate to hardware and I put quite some money into my projects and related research. If you think PCILeech and/or MemProcFS are awesome tools and/or if you had a use for them it's now possible to contribute by becoming a sponsor!

If you like what I've created with PCIleech and MemProcFS with regards to DMA, Memory Analysis and Memory Forensics and would like to give something back to support future development please consider becoming a sponsor at: https://github.com/sponsors/ufrisk

Thank You 💖

Overview

API

Root File System

Per-Process File System

Development

FAQ

Clone this wiki locally