

Install osquery on windows windows#
The Windows Service Control Manager has all of the correct information for running the daemon.osqueryd.exe is running with safe permissions.To get osquery running as a SYSTEM-level service on Windows, one must ensure two things: \tools\deployment\make_windows_package.ps1 'msi' from the source root will generate a standalone MSI package along with the example packs, configuration, and OpenSSL cert bundle. This is a PowerShell script that will generate an MSI package for installing osquery. The second method is to use the script make_windows_package.ps1 included in the source tree. When building, provide an additional CMake parameter, -target package.Īn example of a CMake build that generates an MSI package: cd \projects\osquery\buildĬmake -G "Visual Studio 16 2019" -A 圆4 -T v141 -DOSQUERY_VERSION="4.0.0".When configuring the build, specify a version string for the osquery package using the CMake parameter -DOSQUERY_VERSION.As of the time of this writing, the Chocolatey package installer doesn't add this to the PATH for you you must add it yourself.
Install osquery on windows install#
With Chocolatey, choco install wixtoolset and then add C:\Program Files (x86)\WiX Toolset v3.11\bin to the system PATH. The first method is with minor modifications to the CMake build steps: Installing osquery via the MSI packageįor generating an MSI installer package, we support two methods. You can pass Chocolatey the -params='/InstallService' flag or make use of osquery's -install flag with C:\Program Files\osquery\osqueryd\osqueryd.exe -install to install a Windows SYSTEM-level service for the osqueryd daemon. Installing with ChocolateyĮach osquery tag (stable release) is published to Chocolatey for our supported versions: īy default Chocolatey will install the binaries, example packs, example configuration, and an OpenSSL certificate bundle to C:\Program Files\osquery and nothing more. We recommend installing on Windows using the Chocolatey package manager, or from the latest official binaries available on the Downloads page.įor those needing more customization of their deployment, the steps taken by the installation are explained in more detail, below.
