Query
(T1033) System Owner User Discovery
LogScale · Detection & Monitoring · v1 · @sebastian · 25.7.2026
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/MITRE-ATT&CK-Enterprise/(TA007) Discovery/(T1033) System Owner_User Discovery.md. Origin URL: https://github.com/CrowdStrike/logscale-community-content/blob/main/Queries-Only/MITRE-ATT%26CK-Enterprise/%28TA007%29%20Discovery/%28T1033%29%20System%20Owner_User%20Discovery.md
DetectionEndpoint
Query contentv1
Download v1Loading editor…
Version history
Every save keeps the previous content. Open any version to view or download it.