Mongodb Find System Users Admin

Client issues a MongoDB find query against the system.users collection within the admin database using an empty filter, indicating an attempt to enumerate all stored database user accounts. The request includes a logical session identifier (lsid), reflecting use of session-aware MongoDB protocol features. This primitive represents sensitive authentication-surface reconnaissance where a client seeks to retrieve credential metadata, role assignments, and user configuration details from the administrative namespace.