[RUN COMMANDS] - DOUBTS

[CarlosEsteves]

Hello,

I´ve raised the case Veeam Support - Case # 08233097 - Security Run Command Information and they asked to come in the forum with my request about Run commands.

Security team in the company are pushing us to provide information about run commands execute on Azure buy Veeam.

Can you confirm:
run command are used from backup app registration to extract OS version ?
Are run command used to extract any other information or act on the guest system ?
If yes list all the usage done from run command
Is it custom dev or part of the Veeam product?

Is it possible to have more clear information to be shared with our sec team and documentation if possible?

Thanks

[nielsengelen]

Hi Carlos,

Please give me some time to get the correct information on this topic.

[CarlosEsteves]

Any update?

[nielsengelen]

Hi,

We use runcommand for the following things.

Guest OS detection — reading OS version, edition/SKU, architecture, and whether BitLocker is enabled, so the backup and any restore path can make OS-aware decisions.
Application-consistent processing (VSS) — coordinating the freeze/thaw of Windows VSS writers, and running pre-freeze/post-thaw scripts on Linux, for consistent snapshots.
File-Level Restore — used to browse and restore individual files.
Worker VM management during the backup and restore operations.

[CarlosEsteves]

Thanks

[CarlosEsteves]

Hello,

Is it possible to share any documentation ?

Thanks

[nielsengelen]

Hi Carlos,

For the VSS processing, it's noted under the Guest Scripting section.

The rest is currently not added to the documentation but we'll see how to enhance it.