From af7e2d47d193de5dbee6366ca222f874b843c75c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=9D=8E=E9=80=9A=E6=B4=B2?= <zhangsongcui3371@sina.com>
Date: Tue, 12 May 2026 22:41:36 +0800
Subject: [PATCH] OS (Windows): adds support for Embedded variant in OS
 detection

---
 src/detection/os/os_windows.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/detection/os/os_windows.c b/src/detection/os/os_windows.c
index f4eb11339..12e51bbea 100644
--- a/src/detection/os/os_windows.c
+++ b/src/detection/os/os_windows.c
@@ -1,5 +1,4 @@
 #include "os.h"
-#include "common/library.h"
 #include "common/stringUtils.h"
 #include "common/windows/registry.h"
 #include "common/windows/unicode.h"
@@ -56,6 +55,9 @@ void ffDetectOSImpl(FFOSResult* os) {
         if (ffStrbufStartsWithS(&os->variant, "Server ")) {
             ffStrbufAppendS(&os->name, " Server");
             ffStrbufSubstrAfter(&os->variant, strlen(" Server") - 1);
+        } else if (ffStrbufStartsWithS(&os->variant, "Embedded ")) {
+            ffStrbufAppendS(&os->name, " Embedded");
+            ffStrbufSubstrAfter(&os->variant, strlen(" Embedded") - 1);
         }
 
         if (ffStrbufStartsWithIgnCaseS(&os->variant, "(TM) ")) {