Arctic Wolf Agent Processes
Updated Aug 31, 2023Arctic Wolf Agent processes
Arctic Wolf® Agent runs different processes depending on the operating system:
- Agent processes that run on Linux
- Agent processes that run on macOS
- Agent processes that run on Windows
Note: If you install Agent alongside antivirus, endpoint scanning, or similar software, add these processes to your allowlist so that Agent works correctly.
Agent processes that run on Linux
/var/arcticwolfnetworks/agent/bin/scout-client
/usr/bin/scout-desktop
/var/arcticwolfnetworks/agent/bin/ossec-execd
/var/arcticwolfnetworks/agent/bin/ossec-agentd
/var/arcticwolfnetworks/agent/bin/ossec-syscheckd
/var/arcticwolfnetworks/agent/bin/ossec-logcollector
/var/arcticwolfnetworks/agent/bin/ossec-control
/var/arcticwolfnetworks/agent/bin/wazuh-modulesd
/var/arcticwolfnetworks/agent/scans/jre/jre/bin/java
Agent processes that run on macOS
/Library/ArcticWolfNetworks/Agent/bin/scout-client
/usr/local/libexec/scout-desktop
/Library/ArcticWolfNetworks/Agent/bin/ossec-execd
/Library/ArcticWolfNetworks/Agent/bin/ossec-agentd
/Library/ArcticWolfNetworks/Agent/bin/ossec-syscheckd
/Library/ArcticWolfNetworks/Agent/bin/ossec-logcollector
/Library/ArcticWolfNetworks/Agent/bin/ossec-control
/Library/ArcticWolfNetworks/Agent/bin/wazuh-modulesd
/Library/StartupItems/WAZUH/launcher.sh
/Library/ArcticWolfNetworks/Agent/scans/jre/jre/bin/java
Agent processes that run on Windows
Notes:
- For 32-bit versions of Windows, the process paths begin with
C:\Program Files\...
instead ofC:\Program Files (x86)\...
. - If you are a Managed Risk (MR) customer, vulnerability scanning uses the PowerShell console. If the console usage is blocked by endpoint security tools, the scans fail.
C:\Program Files (x86)\Arctic Wolf Networks\Agent\ossec-agent.exe
C:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\osquery\osquery.exe
C:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\osquery\osqueryi.exe
C:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\systeminfo\systeminfo.exe
C:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\usb\usb.exe
C:\Program Files (x86)\Arctic Wolf Networks\Agent\plugins\wlan\wlan.exe
C:\Program Files (x86)\Arctic Wolf Networks\Agent\scans\jre\jre\bin\java.exe
C:\Program Files (x86)\Arctic Wolf Networks\Agent\scans\scan-utility\Scan-Utilities.jar
C:\Program Files (x86)\Arctic Wolf Networks\Agent\scout-client.exe
C:\Program Files (x86)\Arctic Wolf Networks\Agent\scout-desktop.exe
C:\Program Files (x86)\Arctic Wolf Networks\Agent\uninstall_modules.exe