winbaseobj

Lists named Windows objects in the default object directories, across all terminal services sessions.

Platform support

Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: winbaseobj

  • Windows

Table schema

Name Type Description
session_id INTEGER Terminal Services Session Id
object_name TEXT Object Name
object_type TEXT Object Type

Query examples

select object_name, object_type from winbaseobj
select * from winbaseobj where type='Mutant'