hello, trying to deploy osquery on windows. I hav...
# windows
z
hello, trying to deploy osquery on windows. I have installed via Choco and when i am trying to test
running /path/to/osqueryd --flagfile /path/to/file
i get unsafe permissions for osqueryd...a way around this besides allow-unsafe?
a
Yes, and you can also do something like this :
Copy code
icacls "C:\ProgramData\osquery\bin" /deny "Everyone:(DE,WEA,DC,WA,AD,WD)" /grant "Everyone:(OI)(CI)RX"
icacls "C:\ProgramData\osquery\bin\osqueryd.exe" /deny "Everyone:(DE,WEA,DC,WA,AD,WD)" /grant "Everyone:(OI)(CI)RX"
z
amazing thank you!