On Windows Server 2022 Server the windows_securit...
# generalm
Michael Greenberg
12/13/2022, 4:28 PMOn Windows Server 2022 Server the windows_security_products table is not showing anything.
I took a quick look at the source code ... it seems that windows_security_products.cpp dynamically loads wscapi.dll ... I cannot find this file anywhere on the Server 2022 (though perhaps I misunderstand the code)
According to the documentation WscGetSecurityProviderHealth is not present on a server operating system
Is there a known limitation that windows_security_products does not work on server operating systems ?
z
zwass
12/13/2022, 5:51 PM
Yes, unfortunately Microsoft does not provide the API on Server.
zwass
12/13/2022, 5:53 PM
Just made a PR to update the docs: https://github.com/osquery/osquery/pull/7880/files
m
Michael Greenberg
12/14/2022, 11:40 AMThanks. I was not able to find much explanation as to why the API is not available on a Server other than ... servers need to be more secure and making this information available is a risk.
Michael Greenberg
12/14/2022, 11:41 AMThe first thing I did was to check the documentation ... so thanks for updating it
z
zwass
12/14/2022, 11:58 PM
Unfortunately I don't know why the API isn't available on Server. If someone were to find a way to get the same info on Server I'd be keen to see us implement it.
3 Views