Title
#windows
s

Shan

06/14/2020, 4:50 AM
hello. i am trying to run osquery in an automated fashion on windows environment. i am writing a python module - but seeing problem. i am sure i made some mistakes. is there a step by step guide to enable using osquery via python automation? I have looked in github and found one osquery-python. but having isues there.
s

seph

06/14/2020, 8:37 PM
What are you asking? It's a process. Run it using any standard process management tools. Python on windows seems like an unusual choice, but I don't know you're environment.
8:37 PM
More common is to run osqueryd as a service.
8:37 PM
Less common is to shell out to osqueryi
8:38 PM
Somethings (kolide launcher) manage osqueryd as subprocesses. As said, it's a process. Manage it however.
s

Shan

06/17/2020, 4:09 AM
thanks @seph and @packetzero I was able to automate using OSQUERYD.exe -not shell.