How To: Use OSQuery to Validate Installed Software

https://www.osquery.io/

Overview

This document will cover how to use the osquery.exe application found in the CyberCNS agent folder.

image-20240522-200007.png

Prerequisites

Administrator access to Windows PowerShell


Instructions

  1. Open PowerShell as Administrator

  2. Run the following commands

cd "C:\Program Files (x86)\CyberCNSAgent" .\osqueryi.exe select * from programs where name like '%XXXXX%';

NOTE: You must replace the XXXXX in code step 3 above with the application name you are searching for. As an example, we will search for Edge so that it would look like this:

select * from programs where name like '%edge%' ;

image-20240522-200508.png

Need Support?

Do you need help? You can access our support portal to create, view, and update tickets anytime.

https://cybercns.freshdesk.com

Click below to be directed to our secure support portal or email support@cybercns.com to open a ticket.


Â