Question

What Bash commands can I use to enumerate users on a Linux system during a security audit

Answer 1

When auditing a Linux system, you’ll want to see a list of all users and find out who’s currently logged in.

To list all system users:

• cat /etc/passwd: This reads the file that stores user information.
• cut -d: -f1: It splits each line at the : and only shows the first field, which is the username.

To see who’s logged in right now:

This command shows who’s currently logged into the system.

Both are useful for quick user enumeration in a security audit.