https://github.com/osquery/osquery logo
#general
Title
# general
m

Michael Greenberg

12/13/2022, 4:28 PM
On Windows Server 2022 Server the windows_security_products table is not showing anything. I took a quick look at the source code ... it seems that windows_security_products.cpp dynamically loads wscapi.dll ... I cannot find this file anywhere on the Server 2022 (though perhaps I misunderstand the code) According to the documentation WscGetSecurityProviderHealth is not present on a server operating system Is there a known limitation that windows_security_products does not work on server operating systems ?
z

zwass

12/13/2022, 5:51 PM
Yes, unfortunately Microsoft does not provide the API on Server.
Just made a PR to update the docs: https://github.com/osquery/osquery/pull/7880/files
m

Michael Greenberg

12/14/2022, 11:40 AM
Thanks. I was not able to find much explanation as to why the API is not available on a Server other than ... servers need to be more secure and making this information available is a risk.
The first thing I did was to check the documentation ... so thanks for updating it
z

zwass

12/14/2022, 11:58 PM
Unfortunately I don't know why the API isn't available on Server. If someone were to find a way to get the same info on Server I'd be keen to see us implement it.
3 Views