CrowdStrike / gofalcon

Golang-based SDK to CrowdStrike's APIs
MIT License
60 stars 43 forks source link

When using RTR Admin API Calls with Windows, the CrowdStrike Commands doesn't keep the directory stated. #445

Open terrancedjones opened 3 months ago

terrancedjones commented 3 months ago

When I use RTR execute admin commands (client.RealTimeResponseAdmin.RTRExecuteAdminCommand) on a Windows machine for example I do an ls to see the directories in the current C drive then cd into a specific directory and then do another ls. I get the information located in C: not the directory I cd'ed into. But if I do the same thing Linux it works correctly.

Steps to recreate load RTR Admin do

  1. ls
  2. cd temp
  3. ls

You will get the ls information from c: not from cd temp. We are on the latest build as of 8/12/2024. This may be similar to the issue I created last year with uploading a file into a specified directory in Window. Issue #349