Channels
doorman
zercurity
infrastructure
code-review
queryhub
apple-silicon
carving
goquery
aws
querycon
golang
file-carving
fuzzing
help-proxy
darkbytes
process-auditing
general
windows
random
fleet-dev
tls
fim
awallaby
zentral
zeek
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
community-feeds
Powered by
#windows
Title
# windows
t
Tej Gandhi
10/28/2020, 3:24 PM
Hello All,was able to deploy a fleet server on AWS, wanted to enroll in local Windows clients ,1 or 2 at the beginning and 1000's of the later on how should I proceed?
c
CptOfEvilMinions
10/28/2020, 3:30 PM
Depending on your setup and security concerns (publicly exposing WinRM) you can use something like Ansible to deploy Osquery. To reduce risk you could use a config management tool like Chef or Puppet for deploying Osquery. Below I have a linked a blog post of mine to help automate deploying Osquery with Kolide using Ansible:
https://holdmybeersecurity.com/2020/10/20/demystifying-the-kolide-fleet-api-with-curl-python-fleetctl-and-ansible/
Github repo with code:
https://github.com/CptOfEvilMinions/BlogProjects/tree/master/kolide-api-ansible
You also have Kolide launcher:
https://github.com/kolide/launcher
2 Views
Post