Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
o
OpenPlgx
06/05/2019, 7:39 AM
@ihor
, it has always been ProgramData
i
ihor
06/05/2019, 8:05 AM
yep, but in osquery 3.4.0 Release Notes that described as one of the changes it brings: "#5568 CVE-2019-3567 - osquery is now installed to Program Files to prevent a privilege escalation vulnerability"
👍 1
2 Views
#windows
Join Slack