Unprivileged users can't access Npcap's functionality on a monitored host.
ADVANCED INSTALLER REGISTRY DRIVER
The Npcap driver is installed with the /admin_only flag set, which restricts Npcap's packet reading and writing to users with Administrator privileges only.
ADVANCED INSTALLER REGISTRY WINDOWS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\oneagentmon.HKEY_LOCAL_MACHINE\SOFTWARE\Dynatrace\OneAgent.It's required to enable automatic injection into processes. Oneagentmon driver is installed and OneAgentMon device is created. The Dynatrace OneAgent program is registered with Windows Installer. The Dynatrace OneAgent service is created. For more information, see OneAgent extension user. Instead, the NT AUTHORITY\SYSTEM privileged system account is used. Starting with version 1.195, no user account is created to run OneAgent extensions. OneAgent installer modifies the following aspects of your system: OneAgent performs the following changes to your system: Installation Gather monitoring data related to Docker containers.View the list of libraries loaded for each process.Read application configuration for Apache and IIS.View the descriptions of executable files.Read each process command line and environment.Get memory statistics for all processes.OneAgent installer requires admin privileges to: OneAgent requires admin privileges on Windows, for both installation and operation. OneAgent is tested extensively to ensure that it has minimal performance impact on your system and conforms to the highest security standards.
0 kommentar(er)
