Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
h
hilt
08/05/2021, 6:58 AM
Does launcher call powershell? I have launcher.exe spawn powershell which then creates these random files in Windows\Temp
s
seph
08/05/2021, 12:28 PM
There are a couple of places of places launcher calls powershell, yes.
We generally try to avoid any kind of
exec
style data gathering, but I know there’s a handful of places we need it
#kolide
Join Slack