seph
seph
FWIW https://github.com/osquery/osquery/issues/8323
Reading the source code, it uses the `module_path` from `services` for the path. I'm not super familiar with windows, do you know what that column is meant to indicate? https://github.com/osquery/osquery/blob/e712befdb211839c746631cc5180b7f02ed2ffef/osquery/tables/system/windows/autoexec.cpp#L22-L44
@pradishmp I appreciate the detailed comment on slack. If I read that correctly correct, the change to the full arguments doesn't look useful. Is this something we can conditionalize based...
> When can I expect this to be pushed? Thanks guys I expect we'll cut a release this month, and this should land in that.
To access a lot of the underlying information, osquery needs to be running as root. From your prompt there, it looks like you're running as a user. Does `sudo osqueryi`...