i'm trying to get osquery up and running on window...
# general
k
i'm trying to get osquery up and running on windows client. I use choco to install osquery, and then ahve a powershell that
New-Service -Name "osqueryd" -BinaryPathName "C:\ProgramData\osquery\osqueryd\osqueryd.exe --flagfile=C:\ProgramData\osquery\osquery.flags"
And i ensure the flags file points to osquery database and to the certs folder that has the certs to reach our portal. Also rename the
osquery.example.conf
to
osquery.conf
and then start the osqueryd service. Am i missing something really obvious?