Title
#windows
t

Tej Gandhi

10/28/2020, 3:24 PM
Hello All,was able to deploy a fleet server on AWS, wanted to enroll in local Windows clients ,1 or 2 at the beginning and 1000's of the later on how should I proceed?
CptOfEvilMinions

CptOfEvilMinions

10/28/2020, 3:30 PM
Depending on your setup and security concerns (publicly exposing WinRM) you can use something like Ansible to deploy Osquery. To reduce risk you could use a config management tool like Chef or Puppet for deploying Osquery. Below I have a linked a blog post of mine to help automate deploying Osquery with Kolide using Ansible: https://holdmybeersecurity.com/2020/10/20/demystifying-the-kolide-fleet-api-with-curl-python-fleetctl-and-ansible/ Github repo with code: https://github.com/CptOfEvilMinions/BlogProjects/tree/master/kolide-api-ansible
3:40 PM
You also have Kolide launcher:https://github.com/kolide/launcher