Arctic Wolf Agent Processes
Updated Aug 31, 2023Arctic Wolf Agent processes
Arctic Wolf® Agent runs different processes depending on the operating system:
- Agent processes that run on Linux
- Agent processes that run on macOS
- Agent processes that run on Windows
Note: If you install Agent alongside antivirus, endpoint scanning, or similar software, add these processes to your allowlist so that Agent works correctly.
Agent processes that run on Linux
/var/arcticwolfnetworks/agent/bin/scout-client/usr/bin/scout-desktop/var/arcticwolfnetworks/agent/bin/ossec-execd/var/arcticwolfnetworks/agent/bin/ossec-agentd/var/arcticwolfnetworks/agent/bin/ossec-syscheckd/var/arcticwolfnetworks/agent/bin/ossec-logcollector/var/arcticwolfnetworks/agent/bin/ossec-control/var/arcticwolfnetworks/agent/bin/wazuh-modulesd/var/arcticwolfnetworks/agent/scans/jre/jre/bin/java
Agent processes that run on macOS
/Library/ArcticWolfNetworks/Agent/bin/scout-client/usr/local/libexec/scout-desktop/Library/ArcticWolfNetworks/Agent/bin/ossec-execd/Library/ArcticWolfNetworks/Agent/bin/ossec-agentd/Library/ArcticWolfNetworks/Agent/bin/ossec-syscheckd/Library/ArcticWolfNetworks/Agent/bin/ossec-logcollector/Library/ArcticWolfNetworks/Agent/bin/ossec-control/Library/ArcticWolfNetworks/Agent/bin/wazuh-modulesd/Library/StartupItems/WAZUH/launcher.sh/Library/ArcticWolfNetworks/Agent/scans/jre/jre/bin/java
Agent processes that run on Windows
Notes:
- For 32-bit versions of Windows, the process paths begin with
C:\Program Files\...instead ofC:\Program Files (x86)\.... - If you are a Managed Risk (MR) customer, vulnerability scanning uses the PowerShell console. If the console usage is blocked by endpoint security tools, the scans fail.
C:\Program Files (x86)\Arctic Wolf Networks\Agent\ossec-agent.exeC:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\osquery\osquery.exeC:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\osquery\osqueryi.exeC:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\systeminfo\systeminfo.exeC:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\usb\usb.exeC:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\wlan\wlan.exeC:\Program Files (x86)\Arctic Wolf Networks\Agent\scans\jre\jre\bin\java.exeC:\Program Files (x86)\Arctic Wolf Networks\Agent\scans\scan-utility\Scan-Utilities.jarC:\Program Files (x86)\Arctic Wolf Networks\Agent\scout-client.exeC:\Program Files (x86)\Arctic Wolf Networks\Agent\scout-desktop.exeC:\Program Files (x86)\Arctic Wolf Networks\Agent\uninstall_modules.exe