Title
#windows
c

cstevens

08/05/2020, 6:26 PM
Hey everyone. Im having issues with OSquery pulling my ec2_instance_metadata on a Windows instance.
PS C:\Program Files\osquery> .\osqueryi.exe "SELECT availability_zone AS az, instance_id FROM ec2_instance_metadata;"
.\osqueryi.exe : Error: no such table: ec2_instance_metadata
At line:1 char:1
+ .\osqueryi.exe "SELECT availability_zone AS az, instance_id FROM ec2_ ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (Error: no such ...stance_metadata:String) [], RemoteException
    + FullyQualifiedErrorId : NativeCommandError
6:41 PM
I see now that there is no table defined for windows named "ec2_instance_metadata". Is OSquery setup to find such data for a windows instance then?
s

seph

08/16/2020, 1:14 AM
You might be able to use curl. Not sure.
1:14 AM
I think we should fix the
ec2_instance_metadata
table.