Jason NG
07/22/2021, 2:45 AMJason NG
07/22/2021, 6:24 AMtheopolis
theopolis
Jason NG
07/26/2021, 6:39 AMtheopolis
CptOfEvilMinions
07/26/2021, 8:13 PMicacls .\Extensions /setowner Administrators /t
icacls .\Extensions /grant Administrators:f /t
icacls .\Extensions /inheritance:r /t
icacls .\Extensions /inheritance:d /t
Jason NG
07/27/2021, 1:12 AMJason NG
07/27/2021, 1:12 AMCptOfEvilMinions
07/27/2021, 1:13 AMJason NG
07/27/2021, 2:15 AMCptOfEvilMinions
07/28/2021, 3:48 AMC:\Program Files\osquery
on Windows and your error message says /etc/osquery/extention.py
. Does your config have the wrong path/Linux path?CptOfEvilMinions
07/28/2021, 3:49 AMC:/users/Administrators/extension
and it should be placed in a directory named Extensions
in the Osquery folder on Windows.CptOfEvilMinions
07/28/2021, 3:50 AMJason NG
07/28/2021, 3:50 AMJason NG
07/28/2021, 3:51 AMJason NG
07/28/2021, 3:52 AMJason NG
07/28/2021, 3:54 AMCptOfEvilMinions
07/28/2021, 3:54 AMicals
and the other commands in an elevated Powershell prompt?CptOfEvilMinions
07/28/2021, 3:54 AMCptOfEvilMinions
07/28/2021, 3:55 AMJason NG
07/28/2021, 6:22 AMJason NG
07/28/2021, 6:22 AMCptOfEvilMinions
07/28/2021, 3:18 PMCptOfEvilMinions
07/28/2021, 3:19 PMCptOfEvilMinions
07/28/2021, 3:19 PMJason NG
07/29/2021, 1:20 AM