Audit & Remediation: How To Test Osqueryi.exe On A Windows Endpoint
book
Article ID: 287866
calendar_today
Updated On:
Products
Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
Issue/Introduction
Testing osqueryi locally on a device
Environment
- Carbon Black Cloud Console: All Versions
- Microsoft Windows: All Supported Versions
Resolution
The process to test with Live Response are below.
- Navigate to Endpoints page
- Select Device
- Select Go Live
- From the Live Response Session Window
- CD into c:\program files\confer\blades\LiveQuery\
- Run execfg C:\Program Files\Confer\Blades\LiveQuery\osqueryi.exe
Feedback
thumb_up
Yes
thumb_down
No