diff --git a/Linux/Discovery/Account_Discovery.md b/Linux/Discovery/Account_Discovery.md
index 307df472..d9b12fca 100644
--- a/Linux/Discovery/Account_Discovery.md
+++ b/Linux/Discovery/Account_Discovery.md
@@ -6,6 +6,22 @@ List of all accounts:
 
     cat /etc/passwd
 
+List local groups:
+
+     cat /etc/group > /tmp/loot.txt
+
+View sudoers access (requires root):
+
+    cat /etc/sudoers > /tmp/loot.txt
+
+View accounts with UID 0:
+
+    grep 'x:0:' /etc/passwd > /tmp/loot.txt
+
+List opened files by user:
+
+    username=$(echo $HOME | awk -F'/' '{print $3}') && lsof -u $username
+
 Currently logged in:
 
 Local:
@@ -15,3 +31,7 @@ Local:
 Remote:
 
     finger @<computer_name>
+
+Show if a user account has ever logged in remotely:
+
+    lastlog > /tmp/loot.txt