Administration

Security Onion Console (SOC) includes an Administration page which shows current users:

A lock icon in the Status column indicates that the user account has been disabled via the so-user-disable command as described in the Disabling Accounts section.