Files with extension .OUT created in C:\temp directory


Description

Pattern operations leverage WMI collector to execute the commands on the target. The response is saved in C:\temp directory by default. Sometimes, these files are left behind in the temp directory.

Steps to Reproduce

1. Run HD on a target windows server. Ensure patterns are triggered.
2. Keep track of the c:\temp dir on the target machine. Notice .OUT files getting created and deleted.

Workaround

After carefully considering the severity and frequency of the issue, and the risk of attempting a fix, it has been decided to not address this issue in any current or future releases. We do not make this decision lightly, and we apologize for any inconvenience.

WMI Collector is deprecated since Orlando.


Related Problem: PRB1383813