Hi thor, I don't think this osquery3.4.0.msi is ready for prime time. I just ran on my system, and it correctly installed in c:\Program Files\osquery, however it's still writing to c:\ProgramData\osquery for
osqueryd.pidfile, and osquery.db
It's also looking in c:\ProgramData\osquery for extensions.load
Is that right? I built a new osqueryd from latest on git, and that daemon is looking for same in c:\Program Files\osquery.
Also uninstall is not removing files, and current build from git is not creating osqueryi
Let me know if I'm mistaken in my observations.
Thank you