Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
t
Tej Gandhi
10/28/2020, 3:24 PM
Hello All,was able to deploy a fleet server on AWS, wanted to enroll in local Windows clients ,1 or 2 at the beginning and 1000's of the later on how should I proceed?
c
CptOfEvilMinions
10/28/2020, 3:30 PM
Depending on your setup and security concerns (publicly exposing WinRM) you can use something like Ansible to deploy Osquery. To reduce risk you could use a config management tool like Chef or Puppet for deploying Osquery. Below I have a linked a blog post of mine to help automate deploying Osquery with Kolide using Ansible:
https://holdmybeersecurity.com/2020/10/20/demystifying-the-kolide-fleet-api-with-curl-python-fleetctl-and-ansible/
Github repo with code:
https://github.com/CptOfEvilMinions/BlogProjects/tree/master/kolide-api-ansible
You also have Kolide launcher:
https://github.com/kolide/launcher
2 Views
#windows
Join Slack