valitydev/osquery-1
14
0
Fork 0
mirror of https://github.com/valitydev/osquery-1.git synced 2024-11-06 09:35:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Change windows messages to verbose (#7027)

Browse Source
This commit is contained in:
seph 2021-03-26 21:12:53 -04:00 committed by GitHub
parent 7b795ea299
commit 3c1165d779
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
osquery/tables/system/windows/processes.cpp
View File

@ -269,8 +269,8 @@ Status getProcessCommandLineLegacy(HANDLE proc,
RTL_USER_PROCESS_PARAMETERS upp;
auto s = getUserProcessParameters(proc, upp, pid);
if (!s.ok()) {
LOG(INFO) << "Failed to get PEB UPP for " << pid << " with "
<< GetLastError();
VLOG(1) << "Failed to get PEB UPP for " << pid << " with "
<< GetLastError();
return s;
}
@ -335,8 +335,8 @@ Status getProcessCurrentDirectory(HANDLE proc,
RTL_USER_PROCESS_PARAMETERS upp;
auto s = getUserProcessParameters(proc, upp, pid);
if (!s.ok()) {
LOG(INFO) << "Failed to get PEB UPP for " << pid << " with "
<< GetLastError();
VLOG(1) << "Failed to get PEB UPP for " << pid << " with "
<< GetLastError();
return s;
}
@ -363,7 +363,7 @@ void getProcessPathInfo(HANDLE& proc,
SecureZeroMemory(path.data(), kMaxPathSize);
auto ret = QueryFullProcessImageNameW(proc, 0, path.data(), &out);
if (ret != TRUE) {
LOG(INFO) << "Failed to lookup path information for process " << pid;
VLOG(1) << "Failed to lookup path information for process " << pid;
} else {
r["path"] = SQL_TEXT(wstringToString(path.data()));
}
@ -377,7 +377,7 @@ void getProcessPathInfo(HANDLE& proc,
std::string currDir{""};
auto s = getProcessCurrentDirectory(proc, currDir, pid);
if (!s.ok()) {
LOG(INFO) << "Failed to get cwd for " << pid << " with " << GetLastError();
VLOG(1) << "Failed to get cwd for " << pid << " with " << GetLastError();
} else {
r["cwd"] = SQL_TEXT(currDir);
}

2
osquery/tables/system/windows/windows_crashes.cpp
View File

@ -629,7 +629,7 @@ QueryData genCrashLogs(QueryContext& context) {
if (!fs::exists(dumpFolderLocation) ||
!fs::is_directory(dumpFolderLocation)) {
LOG(ERROR) << "No crash dump directory found";
VLOG(1) << "No crash dump directory found";
return results;
}