wiki created

documentation-payload/Cazalla/commands/whoami.md

@@ -0,0 +1,42 @@
+# whoami - Display Current Context
+
+Display the current security context of the agent.
+
+## Description
+
+The `whoami` command displays the current security context of the agent. Shows the username and domain of the active security token. If token impersonation is active, displays the impersonated user context.
+
+## Syntax
+
+```
+whoami
+```
+
+## Examples
+
+```
+whoami
+```
+
+## Features
+
+- Shows the username and domain of the active security token
+- If token impersonation is active (via `steal_token` or `make_token`), displays the impersonated user context
+- Otherwise, displays the process token context
+- Useful for verifying that token operations succeeded and for confirming the current privilege level before executing commands that require specific permissions
+
+## Output
+
+```
+Current user: DOMAIN\User01
+Domain: DOMAIN
+```
+
+## Related
+
+[Token Support](../../../features.md#token-support), [Context Tracking](../../../features.md#context-tracking)
+
+---
+
+**Command Category:** Token Operations  
+**Requires Admin:** No