shortstack
02/13/2020, 8:15 PMmsiexec /i C:\Windows\Temp\osquery-4.0.2.msi /qn
on a windows 10 endpoint, and it restarted the endpointzwass
02/13/2020, 8:21 PMStefano Bonicatti
02/13/2020, 8:24 PMREBOOT=ReallySuppress
to the installation command and block that behavior, unless it's a custom action.
We can have a look into it but I don't think something custom is there.shortstack
02/13/2020, 9:06 PM