Channels
doorman
infrastructure
random
zercurity
community-feeds
fleet-dev
code-review
queryhub
apple-silicon
carving
tls
fim
goquery
zentral
aws
querycon
golang
zeek
file-carving
fuzzing
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
darkbytes
process-auditing
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
general
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
windows
Title
s
szippy
02/05/2019, 4:58 PMor am I better off making a powershell script? I have to deploy on about 5-10 machines to start, all at different times, where domaining them isn't an option, so I can't just use GPO to push it out with environmental variables/custom reg keys
s
srozb
02/05/2019, 5:59 PMI think
enroll_secretd
defensivedepth
02/05/2019, 6:10 PM@szippy This should give some guidance on bundling the files you need , including the enroll secret file. https://defensivedepth.com/2018/04/25/bundling-custom-configs-with-osquery-msi/
You would specify the enroll secret flag in the flag file, and then use the -extras option to point to the enroll_secret.
That should generate a MSI that will install all the needed files
s
szippy
02/05/2019, 7:01 PMThank you guys! I got the file enrolled with the -extras flag, but hadn't realized I needed to use the flag file. Thanks! I also realized that launcher has a windows version, so I think I have a windows launcher binary that works (I'm testing now)
s
srozb
02/06/2019, 8:36 AMbtw: what osquery version did you compiled? 3.3.2 ? I have no luck compiling it on win10 machine.
s
szippy
02/06/2019, 4:56 PMI had to use 3.3.1, and I HAD to git pull osquery in a folder on the desktop for some silly reason.