Database
Database logins, often shared or built in, and the service accounts applications connect with. The checker reads the system column to group the accounts; the findings come from the other columns, the same way for every system.
What the export usually carries
A database login listing usually carries the login name, whether it is disabled, the default database, created and modified dates and server roles. Many engines keep no last login date unless auditing is switched on, so dormancy often cannot be determined from the export alone; built-in and shared logins are common here.
What the checker most often raises here
- 9. Shared or generic login used by people: The account type is a shared or generic login, from the type column or assumed from the name.
- 13. Vendor default or built-in account enabled: The account is a built-in or vendor default account (from the type column, or a whole account name such as admin, root, sa or guest) and does not read as disabled.
- 7. Service or system account that allows interactive login: An application or system account (service account, API key, OAuth client, agent, automation or workload identity) whose interactive login column reads yes.
- 8. Credential stored in code, a config file or a script: The stored-in column reads code, a config file, a script, or a document (a spreadsheet, a wiki, an email or a chat).
Account types found here
- Built-in or vendor default accounta system account
- Break-glass or emergency accounta user account
- AI agent credentiala system account
- Automation or bot (scheduled jobs, RPA)a system account
- Service accounta system account
- API key or access keya system account
- OAuth client or app registrationa system account
- Device or workload identitya system account
- Mailbox or resource accounta user account
- Test accounta user account
- Shared or generic logina user account
- Administrator or privileged person accounta user account
- Contractor or guesta user account
- Person (employee)a user account
The system names in your export are matched to these classes by the browser dictionary; product names are never shown on these pages. A system the dictionary does not place reads as other, and every finding still works.