Hi everyone, I need some clarification regarding o...
# general
g
Hi everyone, I need some clarification regarding osquery extensions. I recently custom-built an extension in Go. It works fine on Linux and macOS, but on Windows, I'm getting the following error:
Copy code
I0404 11:53:12.662837 16328 init.cpp:413] osquery initialized [version=5.16.0]
I0404 11:53:12.766654 16328 extensions.cpp:438] Found autoloadable extension: C:\Program Files\custom\extensions\compliance.exe
O2025/04/04 11:53:14 Error creating extension: dialing pipe '\\.\pipe\osquery.em': open \\.\pipe\osquery.em: The system cannot find the file specified.
W0404 11:53:16.786880  3532 watcher.cpp:739] Extension respawning too quickly: C:\Program Files\custom\extensions\compliance.exe
Flags used:
Copy code
--extensions_autoload="C:\Program Files\custom\extensions.load"
--extensions_timeout=5
--extensions_interval=5
--extensions_socket="\\.\pipe\osquery.em"
(I also tried using
--extensions_socket="\\.\pipe\shell.em"
but faced the same issue.) Has anyone faced a similar issue or can help me troubleshoot this? Any help would be appreciated! Looking forward to your suggestions.
z
Perhaps a permissions issue? Are you running as administrator?