CimTrak
The CimTrak integration helps you detect unexpected system/device/config modifications and automatically respond/react to threats.
Forensics & Malware Analysis · CimTrak - System Integrity Assurance
Details
| ID | CimTrak |
|---|---|
| Provider | Cimcor Inc |
| Category | Forensics & Malware Analysis |
| From Version | 6.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Supported Modules | Agentix XSIAM |
README
CimTrak XSOAR integration.
Configure CimTrak on Cortex XSOAR
- Fill in the URL to your App Server
- Create an API Key in the CimTrak Management Console and populate in XSOAR
- Fill in the Repository IP relative to the App Server (IE: If App Server is running on the same machine as the Repository you can use 127.0.0.1)
- Fill in Repository Port
- Once configured all unreconciled items from CimTrak will be brought into XSOAR.
Commands
get-events
Input
| Argument Name | Description | Required |
|---|---|---|
| Start | number | Starting number of record to get |
| End | number | Ending number of record to get |
| Filter | json | Filter array to limit results IE: [{name: id, operator:>, value:5}] |
| Sorts | json | Sort array to sort data IE: [{field: id, descending: False}] |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Event.id | number | Event ID |
| CimTrak.Event.leventid | number | Event ID |
| CimTrak.Event.lagentid | number | Agent ID |
| CimTrak.Event.lobjectid | number | Object ID |
| CimTrak.Event.lobjectdetailid | number | Object Detail ID |
| CimTrak.Event.lobjectdetailidint | number | Object Detail Intrusion ID |
| CimTrak.Event.lmessagelevel | number | Message Level |
| CimTrak.Event.szuser | string | User |
| CimTrak.Event.szfileuser | string | File User |
| CimTrak.Event.szmessageid | string | Message ID |
| CimTrak.Event.szmessage | string | Message |
| CimTrak.Event.szfile | string | File |
| CimTrak.Event.szcorrectionid | string | Correction ID |
| CimTrak.Event.szcorrection | string | Correction |
| CimTrak.Event.lcategory | number | Category |
| CimTrak.Event.lemailsent | number | Email Sent |
| CimTrak.Event.lstoragestatus | number | Storage Status |
| CimTrak.Event.dtmdatetime1 | string | Date Time 1 |
| CimTrak.Event.dtmdatetime2 | string | Date Time 2 |
| CimTrak.Event.szchecksum | string | Checksum |
| CimTrak.Event.status | string | Status |
| CimTrak.Event.lprocessid | number | Process ID |
| CimTrak.Event.lthreadid | number | Thread ID |
| CimTrak.Event.szprocess | string | Process |
| CimTrak.Event.szforensicdata | string | Forensic Data |
| CimTrak.Event.dtmdeleted | string | Deteled Date Time |
| CimTrak.Event.ltickcount | number | Tick Count |
| CimTrak.Event.lsubtype | number | SubType |
| CimTrak.Event.ticketNumber | string | Ticket Number |
| CimTrak.Event.ldeleteobjectdetailid | number | Deleted Object Detail ID |
| CimTrak.Event.bfoundinblacklist | number | Found In Blacklist |
| CimTrak.Event.filecontenthash | string | File Content Hash |
| CimTrak.Event.lobjectsettingid | number | Object Setting ID |
| CimTrak.Event.reconciled | number | Reconciled |
| CimTrak.Event.isauthcopy | number | Is Auth Copy |
| CimTrak.Event.externalticketnumber | string | External Ticket Number |
| CimTrak.Event.lparentid | number | Parent ID |
| CimTrak.Event.szobjectpath | string | Object Path |
| CimTrak.Event.dfilesize | number | File Size |
file-analysis-by-hash
Input
| Argument Name | Description | Required |
|---|---|---|
| Hash | string | Hash of file to check |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.FileAnalysis.analysisEngine | string | Analysis Engine used |
| CimTrak.FileAnalysis.analysisSuccess | boolean | Analysis Success Flag |
| CimTrak.FileAnalysis.analysisResults | string | Agent ID |
file-analysis-by-objectdetail-id
Input
| Argument Name | Description | Required |
|---|---|---|
| ObjectDetailId | number | Object Detail Id of file to check |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.FileAnalysis.analysisEngine | string | Analysis Engine used |
| CimTrak.FileAnalysis.analysisSuccess | boolean | Analysis Success Flag |
| CimTrak.FileAnalysis.analysisResults | string | Agent ID |
check-file-against-trusted-file-registry-by-hash
Input
| Argument Name | Description | Required |
|---|---|---|
| Hashes | list | Array of hashes of file to check IE:B47DD22BFE1E5554448262D0C8E6555496B1AA6685AF50F49A12AD82D1109769,D2B3289F12102506717E2A1FB883F62E7DCE09FBDA48BE192905669684E68FD0 |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.TrustedFileRegistry.hash | string | Hash found in registry |
promote-authoritative-baseline-files
Input
| Argument Name | Description | Required |
|---|---|---|
| ObjectDetaildIds | list | Array of object detail IDs of file to check IE:42,43 |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.AuthoritizeBaseline.objectDetailId | number | objectDetailId of file |
| CimTrak.AuthoritizeBaseline.status | string | Status |
| CimTrak.AuthoritizeBaseline.errorCode | string | Error Code |
| CimTrak.AuthoritizeBaseline.errorDescription | string | Status |
demote-authoritative-baseline-files
Input
| Argument Name | Description | Required |
|---|---|---|
| ObjectDetaildIds | list | Array of object detail IDs of file to check IE:42,43 |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.AuthoritizeBaseline.objectDetailId | number | objectDetailId of file |
| CimTrak.AuthoritizeBaseline.status | string | Status |
update-task-disposition
Input
| Argument Name | Description | Required |
|---|---|---|
| taskId | number | Task ID |
| Disposition | string | Disposition of task |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.TaskDisposition.taskId | number | Task Id |
| CimTrak.TaskDisposition.status | string | Status |
get-tickets
Input
| Argument Name | Description | Required |
| — | — | — |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Ticket.id | number | Ticket Id |
| CimTrak.Ticket.ticketNumber | string | Ticket number |
| CimTrak.Ticket.sentiment | string | Ticket sentiment |
| CimTrak.Ticket.sentimenttypeid | string | Ticket sentiment id |
| CimTrak.Ticket.title | string | Ticket title |
| CimTrak.Ticket.description | string | Ticket description |
| CimTrak.Ticket.priority | number | Ticket priority |
| CimTrak.Ticket.disposition | string | Ticket disposition |
| CimTrak.Ticket.creationDate | string | Ticket creation date |
| CimTrak.Ticket.createdByUser | string | Ticket created by user |
| CimTrak.Ticket.modificationDate | string | Ticket modification date |
| CimTrak.Ticket.modifiedByUser | string | Ticket modified by user |
| CimTrak.Ticket.requiresAcknowledgement | boolean | Ticket requires acknowledgement |
| CimTrak.Ticket.requiresConfirmation | boolean | Ticket requires confirmation |
| CimTrak.Ticket.requiresAssessment | boolean | Ticket requires assessment |
| CimTrak.Ticket.startDate | string | Ticket start date |
| CimTrak.Ticket.endDate | string | Ticket end date |
| CimTrak.Ticket.autoPromote | boolean | Ticket auto promote |
| CimTrak.Ticket.assignedToUserId | number | Ticket assigned yo UserId |
| CimTrak.Ticket.assignedToUser | string | Ticket assigned to user |
| CimTrak.Ticket.assignedToGroupId | number | Ticket assigned to GroupId |
| CimTrak.Ticket.assignedToGroup | string | Ticket assigned to group |
| CimTrak.Ticket.externalTicketNumber | string | Ticket external ticket number |
| CimTrak.Ticket.externalTicketType | string | Ticket external ticket type |
| CimTrak.Ticket.tasks | string | Ticket tasks |
| CimTrak.Ticket.comments | string | Ticket comments |
| CimTrak.Ticket.events | string | Ticket events |
get-ticket-tasks
Input
| Argument Name | Description | Required |
| — | — | — |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.TicketTask.id | number | Ticket Task Id |
| CimTrak.TicketTask.ticketId | number | Ticket Id |
| CimTrak.TicketTask.agentObjectId | number | Agent Object id |
| CimTrak.TicketTask.startDate | string | Ticket start date |
| CimTrak.TicketTask.endDate | string | Ticket end date |
| CimTrak.TicketTask.disposition | string | Ticket disposition |
| CimTrak.TicketTask.creationDate | string | Ticket creation date |
| CimTrak.TicketTask.createdByUserId | number | Ticket created by user Id |
| CimTrak.TicketTask.modificationDate | string | Ticket modification date |
| CimTrak.TicketTask.modifiedByUserId | number | Ticket modified by user Id |
| CimTrak.TicketTask.assignedToUserId | number | Ticket assigned yo UserId |
| CimTrak.TicketTask.assignedToGroupId | number | Ticket assigned to GroupId |
| CimTrak.TicketTask.assigneeDisposition | string | Assignee Disposition |
| CimTrak.TicketTask.ticketTitle | string | Ticket title |
| CimTrak.TicketTask.description | string | Ticket description |
| CimTrak.TicketTask.priority | number | Ticket priority |
| CimTrak.TicketTask.ticketDisposition | string | Ticket disposition |
| CimTrak.TicketTask.ticketCreationDate | string | Ticket creation date |
| CimTrak.TicketTask.ticketCreatedByUserId | string | Ticket vreated by user Id |
| CimTrak.TicketTask.ticketModificationDate | string | Ticket modification date |
| CimTrak.TicketTask.requiresAcknowledgement | string | Ticket requires acknowlegment |
| CimTrak.TicketTask.requiresConfirmation | string | Ticket requires confirmation |
| CimTrak.TicketTask.requiresAssessment | string | Ticket requires assessment |
| CimTrak.TicketTask.ticketNumber | string | Ticket number |
| CimTrak.TicketTask.agentName | string | Agent name |
| CimTrak.TicketTask.createdByUsername | string | Created By Username |
| CimTrak.TicketTask.modifiedByUsername | string | Modified by username |
| CimTrak.TicketTask.assigneeName | string | Assignee Name |
add-ticket
Input
| Argument Name | Description | Required |
|---|---|---|
| title | string | Title of ticket |
| priority | number | Ticket priority |
| description | string | Ticket description |
| startDate | string | Ticket start date |
| endDate | string | Ticket end date |
| externalTicketNumber | string | External ticket number |
| externalTicketType | string | External ticket type |
| autoPromote | boolean | Auto promote |
| disposition | string | Ticket disposition |
| requiresAcknowledgement | boolean | Requires acknowledgement |
| requiresAssessment | boolean | Requires assessment |
| requiresConfirmation | boolean | Requires confirmation |
| assignedToUserId | number | Assigned to user Id |
| assignedToUser | string | Assigned to user |
| assignedToGroupId | number | Assigned to group Id |
| assignedToGroup | string | Assigned to group |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Ticket.id | number | Ticket Id |
| CimTrak.Ticket.ticketNumber | string | Ticket number |
| CimTrak.Ticket.sentiment | string | Ticket sentiment |
| CimTrak.Ticket.sentimenttypeid | string | Ticket sentiment id |
| CimTrak.Ticket.title | string | Ticket title |
| CimTrak.Ticket.description | string | Ticket description |
| CimTrak.Ticket.priority | number | Ticket priority |
| CimTrak.Ticket.disposition | string | Ticket disposition |
| CimTrak.Ticket.creationDate | string | Ticket creation date |
| CimTrak.Ticket.createdByUser | string | Ticket created by user |
| CimTrak.Ticket.modificationDate | string | Ticket modification date |
| CimTrak.Ticket.modifiedByUser | string | Ticket modified by user |
| CimTrak.Ticket.requiresAcknowledgement | boolean | Ticket requires acknowledgement |
| CimTrak.Ticket.requiresConfirmation | boolean | Ticket requires confirmation |
| CimTrak.Ticket.requiresAssessment | boolean | Ticket requires assessment |
| CimTrak.Ticket.startDate | string | Ticket start date |
| CimTrak.Ticket.endDate | string | Ticket end date |
| CimTrak.Ticket.autoPromote | boolean | Ticket auto promote |
| CimTrak.Ticket.assignedToUserId | number | Ticket assigned yo UserId |
| CimTrak.Ticket.assignedToUser | string | Ticket assigned to user |
| CimTrak.Ticket.assignedToGroupId | number | Ticket assigned to GroupId |
| CimTrak.Ticket.assignedToGroup | string | Ticket assigned to group |
| CimTrak.Ticket.externalTicketNumber | string | Ticket external ticket number |
| CimTrak.Ticket.externalTicketType | string | Ticket external ticket type |
| CimTrak.Ticket.tasks | string | Ticket tasks |
| CimTrak.Ticket.comments | string | Ticket comments |
| CimTrak.Ticket.events | string | Ticket events |
update-ticket
Input
| Argument Name | Description | Required |
|---|---|---|
| ticketId | number | Ticket Id |
| title | string | Title of ticket |
| priority | number | Ticket priority |
| description | string | Ticket description |
| startDate | string | Ticket start date |
| endDate | string | Ticket end date |
| externalTicketNumber | string | External ticket number |
| externalTicketType | string | External ticket type |
| autoPromote | boolean | Auto promote |
| disposition | string | Ticket disposition |
| requiresAcknowledgement | boolean | Requires acknowledgement |
| requiresAssessment | boolean | Requires assessment |
| requiresConfirmation | boolean | Requires confirmation |
| assignedToUserId | number | Assigned to user Id |
| assignedToUser | string | Assigned to user |
| assignedToGroupId | number | Assigned to group Id |
| assignedToGroup | string | Assigned to group |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Ticket.id | number | Ticket Id |
| CimTrak.Ticket.ticketNumber | string | Ticket number |
| CimTrak.Ticket.sentiment | string | Ticket sentiment |
| CimTrak.Ticket.sentimenttypeid | string | Ticket sentiment id |
| CimTrak.Ticket.title | string | Ticket title |
| CimTrak.Ticket.description | string | Ticket description |
| CimTrak.Ticket.priority | number | Ticket priority |
| CimTrak.Ticket.disposition | string | Ticket disposition |
| CimTrak.Ticket.creationDate | string | Ticket creation date |
| CimTrak.Ticket.createdByUser | string | Ticket created by user |
| CimTrak.Ticket.modificationDate | string | Ticket modification date |
| CimTrak.Ticket.modifiedByUser | string | Ticket modified by user |
| CimTrak.Ticket.requiresAcknowledgement | boolean | Ticket requires acknowledgement |
| CimTrak.Ticket.requiresConfirmation | boolean | Ticket requires confirmation |
| CimTrak.Ticket.requiresAssessment | boolean | Ticket requires assessment |
| CimTrak.Ticket.startDate | string | Ticket start date |
| CimTrak.Ticket.endDate | string | Ticket end date |
| CimTrak.Ticket.autoPromote | boolean | Ticket auto promote |
| CimTrak.Ticket.assignedToUserId | number | Ticket assigned yo UserId |
| CimTrak.Ticket.assignedToUser | string | Ticket assigned to user |
| CimTrak.Ticket.assignedToGroupId | number | Ticket assigned to GroupId |
| CimTrak.Ticket.assignedToGroup | string | Ticket assigned to group |
| CimTrak.Ticket.externalTicketNumber | string | Ticket external ticket number |
| CimTrak.Ticket.externalTicketType | string | Ticket external ticket type |
| CimTrak.Ticket.tasks | string | Ticket tasks |
| CimTrak.Ticket.comments | string | Ticket comments |
| CimTrak.Ticket.events | string | Ticket events |
add-ticket-comment
Input
| Argument Name | Description | Required |
|---|---|---|
| ticketId | number | Ticket Id |
| comment | string | Comment for ticket |
Context Output
| Path | Type | Description |
| — | — | — |
add-hash-allow-list
Input
| Argument Name | Description | Required |
|---|---|---|
| hash | string | Hash |
| filename | string | Filename for hash |
| source | string | Source for hash |
| sourceReference | string | SourceReference for hash |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.AllowList.status | string | Status of adding hash |
| CimTrak.AllowList.errorCode | string | Error Code of adding hash |
| CimTrak.AllowList.errorDescription | string | Error Description of adding hash |
| CimTrak.AllowList.hash | string | Hash added |
| CimTrak.AllowList.tagId | number | TagId of adding hash |
add-hash-deny-list
Input
| Argument Name | Description | Required |
|---|---|---|
| hash | string | Hash |
| filename | string | Filename for hash |
| source | string | Source for hash |
| sourceReference | string | SourceReference for hash |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.DenyList.status | string | Status of adding hash |
| CimTrak.DenyList.errorCode | string | Error Code of adding hash |
| CimTrak.DenyList.errorDescription | string | Error Description of adding hash |
| CimTrak.DenyList.hash | string | Hash added |
| CimTrak.DenyList.tagId | number | TagId of adding hash |
delete-hash-allow-list
Input
| Argument Name | Description | Required |
|---|---|---|
| hash | string | Hash |
| reason | string | Reason for deleting hash |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.AllowList.status | string | Status of deleting hash |
| CimTrak.AllowList.hash | string | Hash deleted |
| CimTrak.AllowList.tagId | number | TagId of deleting hash |
delete-hash-deny-list
Input
| Argument Name | Description | Required |
|---|---|---|
| hash | string | Hash |
| reason | string | Reason for deleting hash |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.DenyList.status | string | Status of deleting hash |
| CimTrak.DenyList.hash | string | Hash deleted |
| CimTrak.DenyList.tagId | number | TagId of deleting hash |
get-sub-generations
Input
| Argument Name | Description | Required |
|---|---|---|
| objectId | number | Object Id |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.SubGenerations.caseSensitive | number | Case Sensitive |
| CimTrak.SubGenerations.agentObjectId | number | Agent Object Id |
| CimTrak.SubGenerations.subGenerationId | number | SubgenerationId |
| CimTrak.SubGenerations.objectId | number | Object Id |
| CimTrak.SubGenerations.generationId | number | Generation Id |
| CimTrak.SubGenerations.subRevision | number | SubRevision |
| CimTrak.SubGenerations.notes | string | Notes |
| CimTrak.SubGenerations.creationDate | string | Creation Date |
| CimTrak.SubGenerations.files | number | Files |
| CimTrak.SubGenerations.directories | number | Directories |
| CimTrak.SubGenerations.totalSize | number | Total Size |
| CimTrak.SubGenerations.revision | number | Revision |
| CimTrak.SubGenerations.userName | string | User Name |
deploy
Input
| Argument Name | Description | Required |
|---|---|---|
| agentObjectId | number | Agent Object Id |
| subGenerationId | number | Sub Generation Id |
| notes | string | Notes |
Context Output
| Path | Type | Description |
| — | — | — |
get-object-group
Input
| Argument Name | Description | Required |
|---|---|---|
| objectId | number | Object Id |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.ObjectGroup.agentIsFilesystem | boolean | Agent Is Filesystem |
| CimTrak.ObjectGroup.cancel | boolean | Cancel |
| CimTrak.ObjectGroup.connected | boolean | Connected |
| CimTrak.ObjectGroup.logsByDays | boolean | Logs By Days |
| CimTrak.ObjectGroup.requireNotes | boolean | Require Notes |
| CimTrak.ObjectGroup.inService | string | In Service |
| CimTrak.ObjectGroup.children | number | Children |
| CimTrak.ObjectGroup.events | number | Events |
| CimTrak.ObjectGroup.intrusions | number | Intrusions |
| CimTrak.ObjectGroup.intrusionSize | number | Intrusion Size |
| CimTrak.ObjectGroup.objectId | number | Object Id |
| CimTrak.ObjectGroup.objectStatus | number | Object Status |
| CimTrak.ObjectGroup.objectSubType | number | Object SubType |
| CimTrak.ObjectGroup.objectType | number | Object Type |
| CimTrak.ObjectGroup.parentId | number | Parent Id |
| CimTrak.ObjectGroup.revisions | number | Revisions |
| CimTrak.ObjectGroup.templateId | number | Template Id |
| CimTrak.ObjectGroup.securityAdd | boolean | Security Add |
| CimTrak.ObjectGroup.securityEdit | boolean | Security Edit |
| CimTrak.ObjectGroup.securityLock | boolean | Security Lock |
| CimTrak.ObjectGroup.securityReport | boolean | Security Report |
| CimTrak.ObjectGroup.securityUnlock | boolean | Security Unlock |
| CimTrak.ObjectGroup.securityView | boolean | Security View |
| CimTrak.ObjectGroup.warnMinutes | number | Warn Minutes |
| CimTrak.ObjectGroup.contact | string | Contact |
| CimTrak.ObjectGroup.createDate | string | Create Date |
| CimTrak.ObjectGroup.description | string | Description |
| CimTrak.ObjectGroup.location | string | Location |
| CimTrak.ObjectGroup.name | string | Name |
| CimTrak.ObjectGroup.objectPath | string | Object Path |
| CimTrak.ObjectGroup.url | string | URL |
| CimTrak.ObjectGroup.agentObjectId | number | Agent Object Id |
| CimTrak.ObjectGroup.objectsCustom | string | Objects Custom |
| CimTrak.ObjectGroup.watchArray | string | Watch Array |
| CimTrak.ObjectGroup.comparisonMethod | number | Comparison Method |
unlock
Input
| Argument Name | Description | Required |
|---|---|---|
| objectId | number | Object Id |
Context Output
| Path | Type | Description |
| — | — | — |
lock
Input
| Argument Name | Description | Required |
|---|---|---|
| objectId | number | Object Id |
Context Output
| Path | Type | Description |
| — | — | — |
get-object
Input
| Argument Name | Description | Required |
|---|---|---|
| objectId | number | Object Id |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Object.agentIsFilesystem | boolean | Agent Is Filesystem |
| CimTrak.Object.cancel | boolean | Cancel |
| CimTrak.Object.connected | boolean | Connected |
| CimTrak.Object.logsByDays | boolean | Logs By Days |
| CimTrak.Object.requireNotes | boolean | Require Notes |
| CimTrak.Object.inService | string | In Service |
| CimTrak.Object.children | number | Children |
| CimTrak.Object.events | number | Events |
| CimTrak.Object.intrusions | number | Intrusions |
| CimTrak.Object.intrusionSize | number | Intrusion Size |
| CimTrak.Object.objectId | number | Object Id |
| CimTrak.Object.objectStatus | number | Object Status |
| CimTrak.Object.objectSubType | number | Object SubType |
| CimTrak.Object.objectType | number | Object Type |
| CimTrak.Object.parentId | number | Parent Id |
| CimTrak.Object.revisions | number | Revisions |
| CimTrak.Object.templateId | number | Template Id |
| CimTrak.Object.securityAdd | boolean | Security Add |
| CimTrak.Object.securityEdit | boolean | Security Edit |
| CimTrak.Object.securityLock | boolean | Security Lock |
| CimTrak.Object.securityReport | boolean | Security Report |
| CimTrak.Object.securityUnlock | boolean | Security Unlock |
| CimTrak.Object.securityView | boolean | Security View |
| CimTrak.Object.warnMinutes | number | Warn Minutes |
| CimTrak.Object.contact | string | Contact |
| CimTrak.Object.createDate | string | Create Date |
| CimTrak.Object.description | string | Description |
| CimTrak.Object.location | string | Location |
| CimTrak.Object.name | string | Name |
| CimTrak.Object.objectPath | string | Object Path |
| CimTrak.Object.url | string | URL |
| CimTrak.Object.agentObjectId | number | Agent Object Id |
force-sync
Input
| Argument Name | Description | Required |
|---|---|---|
| objectId | number | Object Id |
Context Output
| Path | Type | Description |
| — | — | — |
view-file
Input
| Argument Name | Description | Required |
|---|---|---|
| objectDetailId | number | Object Detail Id |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Sync.contents | string | Contents |
run-report-by-name
Input
| Argument Name | Description | Required |
|---|---|---|
| name | string | Name |
| objectId | number | Object Id |
| ReportParameters | json | Parameters for report |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Sync.html | string | HTML Report |
deploy-by-date
Input
| Argument Name | Description | Required |
|---|---|---|
| date | string | Date |
| objectId | number | Object Id |
Context Output
| Path | Type | Description |
| — | — | — |
get-current-compliance-items
Input
| Argument Name | Description | Required |
|---|---|---|
| ObjectId | number | Object ID to retrieve compliance items |
| ComplianceScanId | number | Compliance Scan ID to retrieve compliance items |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.ComplianceItems.objectid | number | Object ID |
| CimTrak.ComplianceItems.type | number | Type of item |
| CimTrak.ComplianceItems.name | string | Name |
| CimTrak.ComplianceItems.description | string | Description |
| CimTrak.ComplianceItems.scanstarttime | string | Scan Start Time |
| CimTrak.ComplianceItems.scanendtime | string | Scan End Time |
| CimTrak.ComplianceItems.scanid | number | Scanid |
| CimTrak.ComplianceItems.compliancemappingid | number | Compliance Mapping id |
| CimTrak.ComplianceItems.id | number | id |
get-objects
Input
| Argument Name | Description | Required |
|---|---|---|
| ObjectType | number | Object Type to retrieve |
| ObjectSubType | number | Object Sub Type to retrieve |
| ParentId | number | Parent ID to retrieve |
| ObjectId | number | Object ID to retrieve |
| ObjectPathAndName | string | Object path and name to retrieve |
| Recursive | boolean | Recursive |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Objects.repositoryDisplayName | string | Repository display name |
| CimTrak.Objects.connected | boolean | Connected |
| CimTrak.Objects.agentObjectId | number | Agent object Id |
| CimTrak.Objects.description | string | Description |
| CimTrak.Objects.name | string | Name |
| CimTrak.Objects.objectPath | string | Object Path |
| CimTrak.Objects.agentIsFilesystem | boolean | Agent is filesystem |
| CimTrak.Objects.cancel | boolean | Cancel |
| CimTrak.Objects.logsByDays | boolean | Logs by days |
| CimTrak.Objects.requireNotes | boolean | Require notes |
| CimTrak.Objects.inService | string | In service |
| CimTrak.Objects.events | number | Events |
| CimTrak.Objects.intrusions | number | Intrusions |
| CimTrak.Objects.intrusionSize | number | Intrusion size |
| CimTrak.Objects.objectId | number | Object ID |
| CimTrak.Objects.objectStatus | number | Object Status |
| CimTrak.Objects.objectSubType | number | object subtype |
| CimTrak.Objects.objectType | number | object type |
| CimTrak.Objects.parentId | number | Parent ID |
| CimTrak.Objects.revisions | number | Revisions |
| CimTrak.Objects.templateId | number | Template Id |
| CimTrak.Objects.securityAdd | boolean | Security add |
| CimTrak.Objects.securityEdit | boolean | Security edit |
| CimTrak.Objects.securityLock | boolean | Security lock |
| CimTrak.Objects.securityReport | boolean | Security report |
| CimTrak.Objects.securityUnlock | boolean | Security unlock |
| CimTrak.Objects.securityView | boolean | Security view |
| CimTrak.Objects.warnMinutes | number | Warn minutes |
| CimTrak.Objects.contact | string | Contact |
| CimTrak.Objects.createDate | string | Create date |
| CimTrak.Objects.location | string | Location |
| CimTrak.Objects.url | string | Url |
| CimTrak.Objects.parentName | string | Parent name |
| CimTrak.Objects.children | number | Children |
| CimTrak.Objects.agentVersion | string | Agent version |
| CimTrak.Objects.agentBuild | number | Agent build |
| CimTrak.Objects.agentOsVersion | string | Agent Os version |
| CimTrak.Objects.agentIp | string | agent Ip |
| CimTrak.Objects.agentName | string | Agent name |
| CimTrak.Objects.agentInstalled | boolean | Agent installed |
get-agent-info
Input
| Argument Name | Description | Required |
|---|---|---|
| ObjectId | number | Object ID to retrieve compliance items |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.AgentInfo.objectData | string | Object data |
| CimTrak.AgentInfo.objectsCustom | string | Object custom |
| CimTrak.AgentInfo.agentData | string | Agent data |
| CimTrak.AgentInfo.state | string | State |
get-compliance-archive-details
Input
| Argument Name | Description | Required |
|---|---|---|
| ObjectId | number | Object ID to retrieve compliance items |
| ComplianceScanId | number | Compliance Scan ID to retrieve compliance items |
| Filter | json | Filter array to limit results IE: [{name: id, operator:>, value:5}] |
| Start | number | Starting number of record to get |
| End | number | Ending number of record to get |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Compliance.testdate | string | Test Date |
| CimTrak.Compliance.datatype | string | Data Type |
| CimTrak.Compliance.scanid | number | Scan id |
| CimTrak.Compliance.ipaddress | string | IP address |
| CimTrak.Compliance.lobjectid | number | Object Id |
| CimTrak.Compliance.alternatesystemid | string | Alternate System ID |
| CimTrak.Compliance.agentuuid | string | Agent uuid |
| CimTrak.Compliance.agentname | string | Agent name |
| CimTrak.Compliance.objectpath | string | Object path |
| CimTrak.Compliance.benchmark | string | Benchmark |
| CimTrak.Compliance.profile | string | Profile |
| CimTrak.Compliance.test | string | Test |
| CimTrak.Compliance.pass | boolean | Pass |
| CimTrak.Compliance.iswaived | boolean | Is waived |
| CimTrak.Compliance.adjustedscore | number | Adjusted score |
| CimTrak.Compliance.possiblescore | number | Possible score |
| CimTrak.Compliance.rawscore | number | Raws core |
| CimTrak.Compliance.weight | number | Weight |
| CimTrak.Compliance.testran | boolean | Test ran |
| CimTrak.Compliance.remediation | string | Remediation |
| CimTrak.Compliance.severity | string | Severity |
| CimTrak.Compliance.version | string | Version |
| CimTrak.Compliance.rationale | string | Rationale |
| CimTrak.Compliance.description | string | Description |
| CimTrak.Compliance.assessment | string | Assessment |
| CimTrak.Compliance.disposition | string | Disposition |
| CimTrak.Compliance.conjunction | string | Conjunction |
| CimTrak.Compliance.negatatevalue | boolean | Negatate value |
| CimTrak.Compliance.comment | string | Comment |
| CimTrak.Compliance.controlversion | string | Controlversion |
| CimTrak.Compliance.controlnumber | string | Control number |
| CimTrak.Compliance.osversion | string | OS version |
| CimTrak.Compliance.personality | string | Personality |
| CimTrak.Compliance.objectid | number | Object id |
| CimTrak.Compliance.userId | number | User id |
| CimTrak.Compliance.block | boolean | Lock |
| CimTrak.Compliance.bunlock | boolean | Unlock |
| CimTrak.Compliance.bview | boolean | View |
| CimTrak.Compliance.bedit | boolean | Edit |
| CimTrak.Compliance.badd | boolean | Add |
| CimTrak.Compliance.breports | boolean | Reports |
| CimTrak.Compliance.blogon | boolean | Logon |
| CimTrak.Compliance.isadmin | boolean | Is admin |
get-compliance-archive-summary
Input
| Argument Name | Description | Required |
|---|---|---|
| ObjectId | number | Object ID to retrieve compliance items |
| ComplianceScanId | number | Compliance Scan ID to retrieve compliance items |
| Filter | json | Filter array to limit results IE: [{name: id, operator:>, value:5}] |
| Start | number | Starting number of record to get |
| End | number | Ending number of record to get |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Compliance.testdate | string | Test Date |
| CimTrak.Compliance.scanid | number | Scan id |
| CimTrak.Compliance.ipaddress | string | IP address |
| CimTrak.Compliance.datatype | string | Data Type |
| CimTrak.Compliance.alternatesystemid | string | Alternate System ID |
| CimTrak.Compliance.agentuuid | string | Agent uuid |
| CimTrak.Compliance.agentname | string | Agent name |
| CimTrak.Compliance.objectpath | string | Object path |
| CimTrak.Compliance.lobjectid | number | Object Id |
| CimTrak.Compliance.benchmark | string | Benchmark |
| CimTrak.Compliance.profile | string | Profile |
| CimTrak.Compliance.totalfailcount | number | Total fail count |
| CimTrak.Compliance.totalpasscount | number | Total pass count |
| CimTrak.Compliance.totaltestsskipped | number | Total tests skipped |
| CimTrak.Compliance.totalwaivecount | number | Total waive count |
| CimTrak.Compliance.pass | boolean | Pass |
| CimTrak.Compliance.totaltestsran | number | Total tests ran |
| CimTrak.Compliance.osversion | string | OS version |
| CimTrak.Compliance.personality | string | Personality |
| CimTrak.Compliance.userId | number | User id |
| CimTrak.Compliance.objectid | number | Object id |
| CimTrak.Compliance.block | boolean | Lock |
| CimTrak.Compliance.bunlock | boolean | Unlock |
| CimTrak.Compliance.bview | boolean | View |
| CimTrak.Compliance.bedit | boolean | Edit |
| CimTrak.Compliance.badd | boolean | Add |
| CimTrak.Compliance.breports | boolean | Reports |
| CimTrak.Compliance.blogon | boolean | Logon |
compliance-scan-children
Input
| Argument Name | Description | Required |
|---|---|---|
| objectParentId | number | Parent Object Id |
Context Output
| Path | Type | Description |
| — | — | — |
compliance-scan-with-summary
Input
| Argument Name | Description | Required |
|---|---|---|
| objectId | number | Object Id |
| retryCount | number | Number of times to retry to check if scan has completed |
| retrySeconds | number | Number of seconds to wait before retry to check if scan completed |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Compliance.testdate | string | Test Date |
| CimTrak.Compliance.scanid | number | Scan id |
| CimTrak.Compliance.ipaddress | string | IP address |
| CimTrak.Compliance.datatype | string | Data Type |
| CimTrak.Compliance.alternatesystemid | string | Alternate System ID |
| CimTrak.Compliance.agentuuid | string | Agent uuid |
| CimTrak.Compliance.agentname | string | Agent name |
| CimTrak.Compliance.objectpath | string | Object path |
| CimTrak.Compliance.lobjectid | number | Object Id |
| CimTrak.Compliance.benchmark | string | Benchmark |
| CimTrak.Compliance.profile | string | Profile |
| CimTrak.Compliance.totalfailcount | number | Total fail count |
| CimTrak.Compliance.totalpasscount | number | Total pass count |
| CimTrak.Compliance.totaltestsskipped | number | Total tests skipped |
| CimTrak.Compliance.totalwaivecount | number | Total waive count |
| CimTrak.Compliance.pass | boolean | Pass |
| CimTrak.Compliance.totaltestsran | number | Total tests ran |
| CimTrak.Compliance.osversion | string | OS version |
| CimTrak.Compliance.personality | string | Personality |
| CimTrak.Compliance.userId | number | User id |
| CimTrak.Compliance.objectid | number | Object id |
| CimTrak.Compliance.block | boolean | Lock |
| CimTrak.Compliance.bunlock | boolean | Unlock |
| CimTrak.Compliance.bview | boolean | View |
| CimTrak.Compliance.bedit | boolean | Edit |
| CimTrak.Compliance.badd | boolean | Add |
| CimTrak.Compliance.breports | boolean | Reports |
| CimTrak.Compliance.blogon | boolean | Logon |
get-agent-object-id-by-alternate-system-id
Input
| Argument Name | Description | Required |
|---|---|---|
| alternateSystemId | string | Alternate system Id |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Object.agentObjectId | number | Object Id of agent |
get-agent-object-by-name
Input
| Argument Name | Description | Required |
|---|---|---|
| agentName | string | Agent name |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Object.agentIsFilesystem | boolean | Agent Is Filesystem |
| CimTrak.Object.cancel | boolean | Cancel |
| CimTrak.Object.connected | boolean | Connected |
| CimTrak.Object.logsByDays | boolean | Logs By Days |
| CimTrak.Object.requireNotes | boolean | Require Notes |
| CimTrak.Object.inService | string | In Service |
| CimTrak.Object.children | number | Children |
| CimTrak.Object.events | number | Events |
| CimTrak.Object.intrusions | number | Intrusions |
| CimTrak.Object.intrusionSize | number | Intrusion Size |
| CimTrak.Object.objectId | number | Object Id |
| CimTrak.Object.objectStatus | number | Object Status |
| CimTrak.Object.objectSubType | number | Object SubType |
| CimTrak.Object.objectType | number | Object Type |
| CimTrak.Object.parentId | number | Parent Id |
| CimTrak.Object.revisions | number | Revisions |
| CimTrak.Object.templateId | number | Template Id |
| CimTrak.Object.securityAdd | boolean | Security Add |
| CimTrak.Object.securityEdit | boolean | Security Edit |
| CimTrak.Object.securityLock | boolean | Security Lock |
| CimTrak.Object.securityReport | boolean | Security Report |
| CimTrak.Object.securityUnlock | boolean | Security Unlock |
| CimTrak.Object.securityView | boolean | Security View |
| CimTrak.Object.warnMinutes | number | Warn Minutes |
| CimTrak.Object.contact | string | Contact |
| CimTrak.Object.createDate | string | Create Date |
| CimTrak.Object.description | string | Description |
| CimTrak.Object.location | string | Location |
| CimTrak.Object.name | string | Name |
| CimTrak.Object.objectPath | string | Object Path |
| CimTrak.Object.url | string | URL |
| CimTrak.Object.agentObjectId | number | Agent Object Id |
get-agent-object-by-alternate-id
Input
| Argument Name | Description | Required |
|---|---|---|
| alternateSystemId | string | Agent alternate id |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Object.agentIsFilesystem | boolean | Agent Is Filesystem |
| CimTrak.Object.cancel | boolean | Cancel |
| CimTrak.Object.connected | boolean | Connected |
| CimTrak.Object.logsByDays | boolean | Logs By Days |
| CimTrak.Object.requireNotes | boolean | Require Notes |
| CimTrak.Object.inService | string | In Service |
| CimTrak.Object.children | number | Children |
| CimTrak.Object.events | number | Events |
| CimTrak.Object.intrusions | number | Intrusions |
| CimTrak.Object.intrusionSize | number | Intrusion Size |
| CimTrak.Object.objectId | number | Object Id |
| CimTrak.Object.objectStatus | number | Object Status |
| CimTrak.Object.objectSubType | number | Object SubType |
| CimTrak.Object.objectType | number | Object Type |
| CimTrak.Object.parentId | number | Parent Id |
| CimTrak.Object.revisions | number | Revisions |
| CimTrak.Object.templateId | number | Template Id |
| CimTrak.Object.securityAdd | boolean | Security Add |
| CimTrak.Object.securityEdit | boolean | Security Edit |
| CimTrak.Object.securityLock | boolean | Security Lock |
| CimTrak.Object.securityReport | boolean | Security Report |
| CimTrak.Object.securityUnlock | boolean | Security Unlock |
| CimTrak.Object.securityView | boolean | Security View |
| CimTrak.Object.warnMinutes | number | Warn Minutes |
| CimTrak.Object.contact | string | Contact |
| CimTrak.Object.createDate | string | Create Date |
| CimTrak.Object.description | string | Description |
| CimTrak.Object.location | string | Location |
| CimTrak.Object.name | string | Name |
| CimTrak.Object.objectPath | string | Object Path |
| CimTrak.Object.url | string | URL |
| CimTrak.Object.agentObjectId | number | Agent Object Id |
get-agent-object-by-ip
Input
| Argument Name | Description | Required |
|---|---|---|
| ip | string | Agent alternate id |
Context Output
| Path | Type | Description |
|---|---|---|
| CimTrak.Object.agentIsFilesystem | boolean | Agent Is Filesystem |
| CimTrak.Object.cancel | boolean | Cancel |
| CimTrak.Object.connected | boolean | Connected |
| CimTrak.Object.logsByDays | boolean | Logs By Days |
| CimTrak.Object.requireNotes | boolean | Require Notes |
| CimTrak.Object.inService | string | In Service |
| CimTrak.Object.children | number | Children |
| CimTrak.Object.events | number | Events |
| CimTrak.Object.intrusions | number | Intrusions |
| CimTrak.Object.intrusionSize | number | Intrusion Size |
| CimTrak.Object.objectId | number | Object Id |
| CimTrak.Object.objectStatus | number | Object Status |
| CimTrak.Object.objectSubType | number | Object SubType |
| CimTrak.Object.objectType | number | Object Type |
| CimTrak.Object.parentId | number | Parent Id |
| CimTrak.Object.revisions | number | Revisions |
| CimTrak.Object.templateId | number | Template Id |
| CimTrak.Object.securityAdd | boolean | Security Add |
| CimTrak.Object.securityEdit | boolean | Security Edit |
| CimTrak.Object.securityLock | boolean | Security Lock |
| CimTrak.Object.securityReport | boolean | Security Report |
| CimTrak.Object.securityUnlock | boolean | Security Unlock |
| CimTrak.Object.securityView | boolean | Security View |
| CimTrak.Object.warnMinutes | number | Warn Minutes |
| CimTrak.Object.contact | string | Contact |
| CimTrak.Object.createDate | string | Create Date |
| CimTrak.Object.description | string | Description |
| CimTrak.Object.location | string | Location |
| CimTrak.Object.name | string | Name |
| CimTrak.Object.objectPath | string | Object Path |
| CimTrak.Object.url | string | URL |
| CimTrak.Object.agentObjectId | number | Agent Object Id |
Configuration parameters
url— App Server URL (required)isFetch— Fetch incidentsincidentType— Incident typeapikey— API Key (required)insecure— Trust any certificate (not secure)Repository URL— Repository URL (required)Repository Port— Repository Port (required)incidentFetchInterval— Incidents Fetch Intervalproxy— Use system proxy settingsfirst_fetch— First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)max_fetch— Maximum number of incidents to fetch every time
Commands (37)
-
add-hash-allow-listAdd Hash to allow list.
-
add-hash-deny-listAdd Hash to deny list.
-
add-ticketCreates a ticket.
-
add-ticket-commentAdds a comment to a ticket or task.
-
check-file-against-trusted-file-registry-by-hashDescription Issues a request to check a list of files (specified by hashes) against the trusted file registry.
-
compliance-scan-childrenLaunch compliance scan for all children of object.
-
compliance-scan-with-summaryLaunch compliance scan for object and return results.
-
delete-hash-allow-listAdd Hash to allow list.
-
delete-hash-deny-listAdd Hash to deny list.
-
demote-authoritative-baseline-filesThis function removes a file (or list of files) from being the authoritative baseline.
-
deployDeploys a specific version of an object group. All existing files will be overwritten with the specified set.
-
deploy-by-dateDeploy By Date.
-
file-analysis-by-hashSubmits a file's hash for analysis and returns the results.
-
file-analysis-by-objectdetail-idSubmits a file's objectDetailId for analysis and returns the results.
-
force-syncSends a request to the server to synchronize an object group.
-
get-agent-infoReturns an array of agent information given an object ID.
-
get-agent-object-by-alternate-idGet agent object from alternate id.
-
get-agent-object-by-ipGet agent object from ip address.
-
get-agent-object-by-nameGet agent object from agent name.
-
get-agent-object-id-by-alternate-system-idGet agent object id from alternate system id.
-
get-compliance-archive-detailsReturns compliance scans details.
-
get-compliance-archive-summaryReturns compliance scans summary.
-
get-current-compliance-itemsThis function returns the benchmarks and/or compliance mappings for the compliance policy specified by the object ID.
-
get-eventsReturns Events from the event log.
-
get-objectRetrieves information for an object.
-
get-object-groupThis function returns an entire data structure describing an object group.
-
get-objectsRetrieves a list of objects.
-
get-sub-generationsReturns the subGenerations for an object group (specified by object ID.
-
get-ticket-tasksThis function gets ticket task information from a CimTrak Master Repository. This function returns an array of ticket task objects.
-
get-ticketsThis function gets ticket information from a CimTrak Master Repository. This function returns an array of ticket objects.
-
lockLocks an object group.
-
promote-authoritative-baseline-filesThis function sets a file (or list of files) as the authoritative baseline.
-
run-report-by-nameThis function runs the report specified by the report name. The report name can be obtained from the getReportHeaders API. The report's parameters can be obtained from the getReportArguments API.
-
unlockUnlocks an object group.
-
update-task-dispositionUpdates the tasks specified in taskIdArray to the disposition specified in the disposition parameter.
-
update-ticketUpdate Ticket.
-
view-fileThis function returns the contents of the requested file encoded in base64.
category: Forensics & Malware Analysis provider: Cimcor Inc commonfields: id: CimTrak version: -1 configuration: - defaultvalue: https://127.0.0.1 display: App Server URL name: url required: true type: 0 - display: Fetch incidents name: isFetch type: 8 required: false - display: Incident type name: incidentType type: 13 required: false - display: API Key name: apikey required: true type: 4 - defaultvalue: "false" display: Trust any certificate (not secure) name: insecure type: 8 required: false - defaultvalue: 127.0.0.1 display: Repository URL name: Repository URL required: true type: 0 - defaultvalue: "3749" display: Repository Port name: Repository Port required: true type: 0 - defaultvalue: "1" display: Incidents Fetch Interval name: incidentFetchInterval type: 19 required: false - display: Use system proxy settings name: proxy type: 8 required: false - defaultvalue: 7 days display: First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days) name: first_fetch type: 0 required: false - name: max_fetch display: Maximum number of incidents to fetch every time type: 0 defaultvalue: '50' required: false description: >- The CimTrak integration helps you detect unexpected system/device/config modifications and automatically respond/react to threats. detaileddescription: "# CimTrak Integration to SOAR:\n The CimTrak integration with Palo Alto XSOAR allows you further vet and respond to emerging threats to your infrastructure. CimTrak performs realtime detection of unauthorized modifications to servers and network devices, while also levering CIS Benchmarks to ensure that your key servers and devices are always in a hardened state. In addition, CimTrak can perform advanced remediation actions such as rolling back to a previous version of critical files. By combining CimTrak & Palo Alto XSOAR, via this integration, you now have the power to further analyze certain security events using CimTrak''s rich file assessment engines and/or verify them against a curated allow-list. In addition, this integration will allow you to leverage CimTrak to integrate your your existing ITSM system such as ServiceNow, BMC Remedy, and Jira. By unlocking dozens of new capabilities, this integration truly unlocks the orchestration and response capabilities of the Palo Alto SOAR.\n\n1.) Fill in the URL to your App Server\n - Example URL -- https://192.168.1.1\n \n2.) Fill the in API Key with your CimTrak API Key\n - To create an API Key, right click the top node in the Tree View\n - Click Properties\n - Click the \"CimTrak Repo API Keys\" Tab\n - Generate API Key\n\n3.) Fill in Repository IP relative to the CimTrak AppServer (Management Console)\n - Typically they are installed on the same machine and you can use 127.0.0.1\n \n4.) Fill in Repository Port\n - Default is 3749\n \n5.) Once configured all unreconciled items from each CimTrak FIM Policies will be brought into XSOAR as an Incident as well as the ability to initiate Compliance Scans manually or based off a playbook as part of the Incident investigation.\n\n# Additional CimTrak Resources & Documentation:\n\nIf you need any help please do not hesitate to reach out to our support team by submitting a ticket at https://www.cimcor.com/support\nYou can also call our support team at 1-877-424-6267 or 1-219-736-4400 and then press #2 for support.\n\nYou can find CimTrak Installation Guide and User Guide in your primary download package you received in the CimTrak_Enterprise_Server.zip file.\n\nFor more information and documentation on the CimTrak API navigate to your Management Console with the example link below:\n- Note: Replace 192.168.1.1 with your CimTrak Server IP Address or FQDN\n- https://192.168.1.1/cmc/#/apidoc" display: CimTrak - System Integrity Assurance name: CimTrak script: commands: - arguments: - defaultValue: "1" description: Starting number of record to get. name: Start - defaultValue: "50" description: Ending number of record to get. name: End - description: "Filter array to limit results IE: [{name: id, operator:>, value:5}]." name: Filter - description: "Sort array to sort data IE: [{field: id, descending: False}]." name: Sorts description: Returns Events from the event log. name: get-events outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Event.id description: Event ID. type: number - contextPath: CimTrak.Event.leventid description: Event ID. type: number - contextPath: CimTrak.Event.lagentid description: Agent ID. type: number - contextPath: CimTrak.Event.lobjectid description: Object ID. type: number - contextPath: CimTrak.Event.lobjectdetailid description: Object Detail ID. type: number - contextPath: CimTrak.Event.lobjectdetailidint description: Object Detail Intrusion ID. type: number - contextPath: CimTrak.Event.lmessagelevel description: Message Level. type: number - contextPath: CimTrak.Event.szuser description: User. type: string - contextPath: CimTrak.Event.szfileuser description: File User. type: string - contextPath: CimTrak.Event.szmessageid description: Message ID. type: string - contextPath: CimTrak.Event.szmessage description: Message. type: string - contextPath: CimTrak.Event.szfile description: File. type: string - contextPath: CimTrak.Event.szcorrectionid description: Correction ID. type: string - contextPath: CimTrak.Event.szcorrection description: Correction. type: string - contextPath: CimTrak.Event.lcategory description: Category. type: number - contextPath: CimTrak.Event.lemailsent description: Email Sent. type: number - contextPath: CimTrak.Event.lstoragestatus description: Storage Status. type: number - contextPath: CimTrak.Event.dtmdatetime1 description: Date Time 1. type: string - contextPath: CimTrak.Event.dtmdatetime2 description: Date Time 2. type: string - contextPath: CimTrak.Event.szchecksum description: Checksum. type: string - contextPath: CimTrak.Event.status description: Status. type: string - contextPath: CimTrak.Event.lprocessid description: Process ID. type: number - contextPath: CimTrak.Event.lthreadid description: Thread ID. type: number - contextPath: CimTrak.Event.szprocess description: Process. type: string - contextPath: CimTrak.Event.szforensicdata description: Forensic Data. type: string - contextPath: CimTrak.Event.dtmdeleted description: Deleted Date Time. type: string - contextPath: CimTrak.Event.ltickcount description: Tick Count. type: number - contextPath: CimTrak.Event.lsubtype description: SubType. type: number - contextPath: CimTrak.Event.ticketNumber description: Ticket Number. type: string - contextPath: CimTrak.Event.ldeleteobjectdetailid description: Deleted Object Detail ID. type: number - contextPath: CimTrak.Event.bfoundinblacklist description: Found In Blacklist. type: number - contextPath: CimTrak.Event.filecontenthash description: File Content Hash. type: string - contextPath: CimTrak.Event.lobjectsettingid description: Object Setting ID. type: number - contextPath: CimTrak.Event.reconciled description: Reconciled. type: number - contextPath: CimTrak.Event.isauthcopy description: Is Auth Copy. type: number - contextPath: CimTrak.Event.externalticketnumber description: External Ticket Number. type: string - contextPath: CimTrak.Event.lparentid description: Parent ID. type: number - contextPath: CimTrak.Event.szobjectpath description: Object Path. type: string - contextPath: CimTrak.Event.dfilesize description: File Size. type: number - arguments: - description: The hash of the file to analyze. name: Hash description: "Submits a file's hash for analysis and returns the results." name: file-analysis-by-hash outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.FileAnalysis.analysisEngine description: Analysis Engine used. type: string - contextPath: CimTrak.FileAnalysis.analysisSuccess description: Analysis Success Flag. type: boolean - contextPath: CimTrak.FileAnalysis.analysisResults description: Agent ID. type: string - arguments: - description: The objectDetailId of the file to analyze. name: ObjectDetailId description: Submits a file's objectDetailId for analysis and returns the results. name: file-analysis-by-objectdetail-id outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.FileAnalysis.analysisEngine description: Analysis Engine used. type: string - contextPath: CimTrak.FileAnalysis.analysisSuccess description: Analysis Success Flag. type: boolean - contextPath: CimTrak.FileAnalysis.analysisResults description: Agent ID. type: string - arguments: - description: The array of file hashes to check against the trusted file registry. name: Hashes description: "Description\r\nIssues a request to check a list of files (specified by hashes) against the trusted file registry." name: check-file-against-trusted-file-registry-by-hash outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.TrustedFileRegistry.hash description: Hash found in registry. type: string - arguments: - description: Array of object detail IDs of file to check IE:42,43. name: ObjectDetaildIds description: This function sets a file (or list of files) as the authoritative baseline. name: promote-authoritative-baseline-files outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.AuthoritizeBaseline.objectDetailId description: objectDetailId of file. type: number - contextPath: CimTrak.AuthoritizeBaseline.status description: Status. type: string - contextPath: CimTrak.AuthoritizeBaseline.errorCode description: Error Code. type: string - contextPath: CimTrak.AuthoritizeBaseline.errorDescription description: Status. type: string - arguments: - description: Array of object detail IDs of file to check IE:42,43. name: ObjectDetaildIds description: This function removes a file (or list of files) from being the authoritative baseline. name: demote-authoritative-baseline-files outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.AuthoritizeBaseline.objectDetailId description: objectDetailId of file. type: number - contextPath: CimTrak.AuthoritizeBaseline.status description: Status. type: string - arguments: - description: Task ID. name: taskId - description: 'The requested disposition of the specified task. Valid dispositions are: ["COMPLETED", "REJECTED", "ASSIGNED"].' name: Disposition description: Updates the tasks specified in taskIdArray to the disposition specified in the disposition parameter. name: update-task-disposition outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.TaskDisposition.taskId description: Task Id. type: number - contextPath: CimTrak.TaskDisposition.status description: Status. type: string - arguments: [] description: This function gets ticket information from a CimTrak Master Repository. This function returns an array of ticket objects. name: get-tickets outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Ticket.id description: Ticket Id. type: number - contextPath: CimTrak.Ticket.ticketNumber description: Ticket number. type: string - contextPath: CimTrak.Ticket.sentiment description: Ticket sentiment. type: string - contextPath: CimTrak.Ticket.sentimenttypeid description: Ticket sentiment id. type: string - contextPath: CimTrak.Ticket.title description: Ticket title. type: string - contextPath: CimTrak.Ticket.description description: Ticket description. type: string - contextPath: CimTrak.Ticket.priority description: Ticket priority. type: number - contextPath: CimTrak.Ticket.disposition description: Ticket disposition. type: string - contextPath: CimTrak.Ticket.creationDate description: Ticket creation date. type: string - contextPath: CimTrak.Ticket.createdByUser description: Ticket created by user. type: string - contextPath: CimTrak.Ticket.modificationDate description: Ticket modification date. type: string - contextPath: CimTrak.Ticket.modifiedByUser description: Ticket modified by user. type: string - contextPath: CimTrak.Ticket.requiresAcknowledgement description: Ticket requires acknowledgement. type: boolean - contextPath: CimTrak.Ticket.requiresConfirmation description: Ticket requires confirmation. type: boolean - contextPath: CimTrak.Ticket.requiresAssessment description: Ticket requires assessment. type: boolean - contextPath: CimTrak.Ticket.startDate description: Ticket start date. type: string - contextPath: CimTrak.Ticket.endDate description: Ticket end date. type: string - contextPath: CimTrak.Ticket.autoPromote description: Ticket auto promote. type: boolean - contextPath: CimTrak.Ticket.assignedToUserId description: Ticket assigned yo UserId. type: number - contextPath: CimTrak.Ticket.assignedToUser description: Ticket assigned to user. type: string - contextPath: CimTrak.Ticket.assignedToGroupId description: Ticket assigned to GroupId. type: number - contextPath: CimTrak.Ticket.assignedToGroup description: Ticket assigned to group. type: string - contextPath: CimTrak.Ticket.externalTicketNumber description: Ticket external ticket number. type: string - contextPath: CimTrak.Ticket.externalTicketType description: Ticket external ticket type. type: string - contextPath: CimTrak.Ticket.tasks description: Ticket tasks. type: string - contextPath: CimTrak.Ticket.comments description: Ticket comments. type: string - contextPath: CimTrak.Ticket.events description: Ticket events. type: string - arguments: [] description: This function gets ticket task information from a CimTrak Master Repository. This function returns an array of ticket task objects. name: get-ticket-tasks outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.TicketTask.id description: Ticket Task Id. type: number - contextPath: CimTrak.TicketTask.ticketId description: Ticket Id. type: number - contextPath: CimTrak.TicketTask.agentObjectId description: Agent Object id. type: number - contextPath: CimTrak.TicketTask.startDate description: Ticket start date. type: string - contextPath: CimTrak.TicketTask.endDate description: Ticket end date. type: string - contextPath: CimTrak.TicketTask.disposition description: Ticket disposition. type: string - contextPath: CimTrak.TicketTask.creationDate description: Ticket creation date. type: string - contextPath: CimTrak.TicketTask.createdByUserId description: Ticket created by user Id. type: number - contextPath: CimTrak.TicketTask.modificationDate description: Ticket modification date. type: string - contextPath: CimTrak.TicketTask.modifiedByUserId description: Ticket modified by user Id. type: number - contextPath: CimTrak.TicketTask.assignedToUserId description: Ticket assigned yo UserId. type: number - contextPath: CimTrak.TicketTask.assignedToGroupId description: Ticket assigned to GroupId. type: number - contextPath: CimTrak.TicketTask.assigneeDisposition description: Assignee Disposition. type: string - contextPath: CimTrak.TicketTask.ticketTitle description: Ticket title. type: string - contextPath: CimTrak.TicketTask.description description: Ticket description. type: string - contextPath: CimTrak.TicketTask.priority description: Ticket priority. type: number - contextPath: CimTrak.TicketTask.ticketDisposition description: Ticket disposition. type: string - contextPath: CimTrak.TicketTask.ticketCreationDate description: Ticket creation date. type: string - contextPath: CimTrak.TicketTask.ticketCreatedByUserId description: Ticket created by user Id. type: string - contextPath: CimTrak.TicketTask.ticketModificationDate description: Ticket modification date. type: string - contextPath: CimTrak.TicketTask.requiresAcknowledgement description: Ticket requires acknowledgment. type: string - contextPath: CimTrak.TicketTask.requiresConfirmation description: Ticket requires confirmation. type: string - contextPath: CimTrak.TicketTask.requiresAssessment description: Ticket requires assessment. type: string - contextPath: CimTrak.TicketTask.ticketNumber description: Ticket number. type: string - contextPath: CimTrak.TicketTask.agentName description: Agent name. type: string - contextPath: CimTrak.TicketTask.createdByUsername description: Created By Username. type: string - contextPath: CimTrak.TicketTask.modifiedByUsername description: Modified by username. type: string - contextPath: CimTrak.TicketTask.assigneeName description: Assignee Name. type: string - arguments: - description: Title of ticket. name: title - defaultValue: "1" description: A priority from 1-5. name: priority - description: Ticket description. name: description - description: Either both start date must be valid and startDate < endDate OR they must both be blank (no dates) - if not supplied, we will fallback to the ticket dates. name: startDate - description: Ticket end date. name: endDate - description: For integration with external ticketing systems. name: externalTicketNumber - description: A string describing an external ticketing system. name: externalTicketType - defaultValue: "false" description: Associated events will get promoted to the Authoritative Baseline. name: autoPromote - description: This value is defaulted. If you are admin then "ASSIGNED", else "AWAITING_APPROVAL". name: disposition - defaultValue: "false" description: Non admins can create tickets for themselves only and in that case this value is replaced with "false". If an admin creates a ticket, the passed value is used, otherwise default to "false". name: requiresAcknowledgement - defaultValue: "false" description: Non admins can create tickets for themselves only and in that case this value is replaced with "true". If an admin creates a ticket, the passed value is used, otherwise the default is "true". name: requiresAssessment - defaultValue: "false" description: Requires confirmation. name: requiresConfirmation - defaultValue: "0" description: These 4 values are taken as a set and only one value will get used. Here is their priority order. name: assignedToUserId - description: Assigned to user. name: assignedToUser - defaultValue: "0" description: Assigned to group Id. name: assignedToGroupId - description: Assigned to group. name: assignedToGroup description: Creates a ticket. name: add-ticket outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Ticket.id description: Ticket Id. type: number - contextPath: CimTrak.Ticket.ticketNumber description: Ticket number. type: string - contextPath: CimTrak.Ticket.sentiment description: Ticket sentiment. type: string - contextPath: CimTrak.Ticket.sentimenttypeid description: Ticket sentiment id. type: string - contextPath: CimTrak.Ticket.title description: Ticket title. type: string - contextPath: CimTrak.Ticket.description description: Ticket description. type: string - contextPath: CimTrak.Ticket.priority description: Ticket priority. type: number - contextPath: CimTrak.Ticket.disposition description: Ticket disposition. type: string - contextPath: CimTrak.Ticket.creationDate description: Ticket creation date. type: string - contextPath: CimTrak.Ticket.createdByUser description: Ticket created by user. type: string - contextPath: CimTrak.Ticket.modificationDate description: Ticket modification date. type: string - contextPath: CimTrak.Ticket.modifiedByUser description: Ticket modified by user. type: string - contextPath: CimTrak.Ticket.requiresAcknowledgement description: Ticket requires acknowledgement. type: boolean - contextPath: CimTrak.Ticket.requiresConfirmation description: Ticket requires confirmation. type: boolean - contextPath: CimTrak.Ticket.requiresAssessment description: Ticket requires assessment. type: boolean - contextPath: CimTrak.Ticket.startDate description: Ticket start date. type: string - contextPath: CimTrak.Ticket.endDate description: Ticket end date. type: string - contextPath: CimTrak.Ticket.autoPromote description: Ticket auto promote. type: boolean - contextPath: CimTrak.Ticket.assignedToUserId description: Ticket assigned yo UserId. type: number - contextPath: CimTrak.Ticket.assignedToUser description: Ticket assigned to user. type: string - contextPath: CimTrak.Ticket.assignedToGroupId description: Ticket assigned to GroupId. type: number - contextPath: CimTrak.Ticket.assignedToGroup description: Ticket assigned to group. type: string - contextPath: CimTrak.Ticket.externalTicketNumber description: Ticket external ticket number. type: string - contextPath: CimTrak.Ticket.externalTicketType description: Ticket external ticket type. type: string - contextPath: CimTrak.Ticket.tasks description: Ticket tasks. type: string - contextPath: CimTrak.Ticket.comments description: Ticket comments. type: string - contextPath: CimTrak.Ticket.events description: Ticket events. type: string - arguments: - description: Ticket Id. name: ticketId - description: Title of ticket. name: title - defaultValue: "1" description: Ticket priority. name: priority - description: Ticket description. name: description - description: Ticket start date. name: startDate - description: Ticket end date. name: endDate - description: 'External ticket number.' name: externalTicketNumber - description: External ticket type. name: externalTicketType - defaultValue: "false" description: Auto promote. name: autoPromote - description: Ticket disposition. name: disposition - defaultValue: "false" description: Requires acknowledgement. name: requiresAcknowledgement - defaultValue: "false" description: Requires assessment. name: requiresAssessment - defaultValue: "false" description: Requires confirmation. name: requiresConfirmation - defaultValue: "0" description: Assigned to user Id. name: assignedToUserId - description: Assigned to user. name: assignedToUser - defaultValue: "0" description: Assigned to group Id. name: assignedToGroupId - description: Assigned to group. name: assignedToGroup description: Update Ticket. name: update-ticket outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Ticket.id description: Ticket Id. type: number - contextPath: CimTrak.Ticket.ticketNumber description: Ticket number. type: string - contextPath: CimTrak.Ticket.sentiment description: Ticket sentiment. type: string - contextPath: CimTrak.Ticket.sentimenttypeid description: Ticket sentiment id. type: string - contextPath: CimTrak.Ticket.title description: Ticket title. type: string - contextPath: CimTrak.Ticket.description description: Ticket description. type: string - contextPath: CimTrak.Ticket.priority description: Ticket priority. type: number - contextPath: CimTrak.Ticket.disposition description: Ticket disposition. type: string - contextPath: CimTrak.Ticket.creationDate description: Ticket creation date. type: string - contextPath: CimTrak.Ticket.createdByUser description: Ticket created by user. type: string - contextPath: CimTrak.Ticket.modificationDate description: Ticket modification date. type: string - contextPath: CimTrak.Ticket.modifiedByUser description: Ticket modified by user. type: string - contextPath: CimTrak.Ticket.requiresAcknowledgement description: Ticket requires acknowledgement. type: boolean - contextPath: CimTrak.Ticket.requiresConfirmation description: Ticket requires confirmation. type: boolean - contextPath: CimTrak.Ticket.requiresAssessment description: Ticket requires assessment. type: boolean - contextPath: CimTrak.Ticket.startDate description: Ticket start date. type: string - contextPath: CimTrak.Ticket.endDate description: Ticket end date. type: string - contextPath: CimTrak.Ticket.autoPromote description: Ticket auto promote. type: boolean - contextPath: CimTrak.Ticket.assignedToUserId description: Ticket assigned yo UserId. type: number - contextPath: CimTrak.Ticket.assignedToUser description: Ticket assigned to user. type: string - contextPath: CimTrak.Ticket.assignedToGroupId description: Ticket assigned to GroupId. type: number - contextPath: CimTrak.Ticket.assignedToGroup description: Ticket assigned to group. type: string - contextPath: CimTrak.Ticket.externalTicketNumber description: Ticket external ticket number. type: string - contextPath: CimTrak.Ticket.externalTicketType description: Ticket external ticket type. type: string - contextPath: CimTrak.Ticket.tasks description: Ticket tasks. type: string - contextPath: CimTrak.Ticket.comments description: Ticket comments. type: string - contextPath: CimTrak.Ticket.events description: Ticket events. type: string - arguments: - description: Either ticketId or taskId will be 0. A comment is added either at the ticket level or the task level. name: ticketId - description: 'Some Comment.' name: comment description: Adds a comment to a ticket or task. name: add-ticket-comment outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - arguments: - description: Hash. name: hash - description: Filename for hash. name: filename - description: Source for hash. name: source - description: SourceReference for hash. name: sourceReference description: Add Hash to allow list. name: add-hash-allow-list outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.AllowList.status description: Status of adding hash. type: string - contextPath: CimTrak.AllowList.errorCode description: Error Code of adding hash. type: string - contextPath: CimTrak.AllowList.errorDescription description: Error Description of adding hash. type: string - contextPath: CimTrak.AllowList.hash description: Hash added. type: string - contextPath: CimTrak.AllowList.tagId description: TagId of adding hash. type: number - arguments: - description: Hash. name: hash - description: Filename for hash. name: filename - description: Source for hash. name: source - description: SourceReference for hash. name: sourceReference description: Add Hash to deny list. name: add-hash-deny-list outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.DenyList.status description: Status of adding hash. type: string - contextPath: CimTrak.DenyList.errorCode description: Error Code of adding hash. type: string - contextPath: CimTrak.DenyList.errorDescription description: Error Description of adding hash. type: string - contextPath: CimTrak.DenyList.hash description: Hash added. type: string - contextPath: CimTrak.DenyList.tagId description: TagId of adding hash. type: number - arguments: - description: Hash. name: hash - description: Reason for deleting hash. name: reason description: Add Hash to allow list. name: delete-hash-allow-list outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.AllowList.status description: Status of deleting hash. type: string - contextPath: CimTrak.AllowList.hash description: Hash deleted. type: string - contextPath: CimTrak.AllowList.tagId description: TagId of deleting hash. type: number - arguments: - description: Hash. name: hash - description: Reason for deleting hash. name: reason description: Add Hash to deny list. name: delete-hash-deny-list outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.DenyList.status description: Status of deleting hash. type: string - contextPath: CimTrak.DenyList.hash description: Hash deleted. type: string - contextPath: CimTrak.DenyList.tagId description: TagId of deleting hash. type: number - arguments: - description: Object Id. name: objectId description: Returns the subGenerations for an object group (specified by object ID. name: get-sub-generations outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.SubGenerations.caseSensitive description: Case Sensitive. type: number - contextPath: CimTrak.SubGenerations.agentObjectId description: Agent Object Id. type: number - contextPath: CimTrak.SubGenerations.subGenerationId description: Subgeneration Id. type: number - contextPath: CimTrak.SubGenerations.objectId description: Object Id. type: number - contextPath: CimTrak.SubGenerations.generationId description: Generation Id. type: number - contextPath: CimTrak.SubGenerations.subRevision description: SubRevision. type: number - contextPath: CimTrak.SubGenerations.notes description: Notes. type: string - contextPath: CimTrak.SubGenerations.creationDate description: Creation Date. type: string - contextPath: CimTrak.SubGenerations.files description: Files. type: number - contextPath: CimTrak.SubGenerations.directories description: Directories. type: number - contextPath: CimTrak.SubGenerations.totalSize description: Total Size. type: number - contextPath: CimTrak.SubGenerations.revision description: Revision. type: number - contextPath: CimTrak.SubGenerations.userName description: User Name. type: string - arguments: - description: Agent Object Id. name: agentObjectId - description: Sub Generation Id. name: subGenerationId - description: Notes. name: notes description: Deploys a specific version of an object group. All existing files will be overwritten with the specified set. name: deploy outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - arguments: - description: Object Id. name: objectId description: This function returns an entire data structure describing an object group. name: get-object-group outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.ObjectGroup.agentIsFilesystem description: Agent Is Filesystem. type: boolean - contextPath: CimTrak.ObjectGroup.cancel description: Cancel. type: boolean - contextPath: CimTrak.ObjectGroup.connected description: Connected. type: boolean - contextPath: CimTrak.ObjectGroup.logsByDays description: Logs By Days. type: boolean - contextPath: CimTrak.ObjectGroup.requireNotes description: Require Notes. type: boolean - contextPath: CimTrak.ObjectGroup.inService description: In Service. type: string - contextPath: CimTrak.ObjectGroup.children description: Children. type: number - contextPath: CimTrak.ObjectGroup.events description: Events. type: number - contextPath: CimTrak.ObjectGroup.intrusions description: Intrusions. type: number - contextPath: CimTrak.ObjectGroup.intrusionSize description: Intrusion Size. type: number - contextPath: CimTrak.ObjectGroup.objectId description: Object Id. type: number - contextPath: CimTrak.ObjectGroup.objectStatus description: Object Status. type: number - contextPath: CimTrak.ObjectGroup.objectSubType description: Object SubType. type: number - contextPath: CimTrak.ObjectGroup.objectType description: Object Type. type: number - contextPath: CimTrak.ObjectGroup.parentId description: Parent Id. type: number - contextPath: CimTrak.ObjectGroup.revisions description: Revisions. type: number - contextPath: CimTrak.ObjectGroup.templateId description: Template Id. type: number - contextPath: CimTrak.ObjectGroup.securityAdd description: Security Add. type: boolean - contextPath: CimTrak.ObjectGroup.securityEdit description: Security Edit. type: boolean - contextPath: CimTrak.ObjectGroup.securityLock description: Security Lock. type: boolean - contextPath: CimTrak.ObjectGroup.securityReport description: Security Report. type: boolean - contextPath: CimTrak.ObjectGroup.securityUnlock description: Security Unlock. type: boolean - contextPath: CimTrak.ObjectGroup.securityView description: Security View. type: boolean - contextPath: CimTrak.ObjectGroup.warnMinutes description: Warn Minutes. type: number - contextPath: CimTrak.ObjectGroup.contact description: Contact. type: string - contextPath: CimTrak.ObjectGroup.createDate description: Create Date. type: string - contextPath: CimTrak.ObjectGroup.description description: Description. type: string - contextPath: CimTrak.ObjectGroup.location description: Location. type: string - contextPath: CimTrak.ObjectGroup.name description: Name. type: string - contextPath: CimTrak.ObjectGroup.objectPath description: Object Path. type: string - contextPath: CimTrak.ObjectGroup.url description: URL. type: string - contextPath: CimTrak.ObjectGroup.agentObjectId description: Agent Object Id. type: number - contextPath: CimTrak.ObjectGroup.objectsCustom description: Objects Custom. type: string - contextPath: CimTrak.ObjectGroup.watchArray description: Watch Array. type: string - contextPath: CimTrak.ObjectGroup.comparisonMethod description: Comparison Method. type: number - arguments: - description: Object Id. name: objectId description: Unlocks an object group. name: unlock outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - arguments: - description: Object Id. name: objectId description: Locks an object group. name: lock outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - arguments: - description: Object Id. name: objectId description: Retrieves information for an object. name: get-object outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Object.agentIsFilesystem description: Agent Is Filesystem. type: boolean - contextPath: CimTrak.Object.cancel description: Cancel. type: boolean - contextPath: CimTrak.Object.connected description: Connected. type: boolean - contextPath: CimTrak.Object.logsByDays description: Logs By Days. type: boolean - contextPath: CimTrak.Object.requireNotes description: Require Notes. type: boolean - contextPath: CimTrak.Object.inService description: In Service. type: string - contextPath: CimTrak.Object.children description: Children. type: number - contextPath: CimTrak.Object.events description: Events. type: number - contextPath: CimTrak.Object.intrusions description: Intrusions. type: number - contextPath: CimTrak.Object.intrusionSize description: Intrusion Size. type: number - contextPath: CimTrak.Object.objectId description: Object Id. type: number - contextPath: CimTrak.Object.objectStatus description: Object Status. type: number - contextPath: CimTrak.Object.objectSubType description: Object SubType. type: number - contextPath: CimTrak.Object.objectType description: Object Type. type: number - contextPath: CimTrak.Object.parentId description: Parent Id. type: number - contextPath: CimTrak.Object.revisions description: Revisions. type: number - contextPath: CimTrak.Object.templateId description: Template Id. type: number - contextPath: CimTrak.Object.securityAdd description: Security Add. type: boolean - contextPath: CimTrak.Object.securityEdit description: Security Edit. type: boolean - contextPath: CimTrak.Object.securityLock description: Security Lock. type: boolean - contextPath: CimTrak.Object.securityReport description: Security Report. type: boolean - contextPath: CimTrak.Object.securityUnlock description: Security Unlock. type: boolean - contextPath: CimTrak.Object.securityView description: Security View. type: boolean - contextPath: CimTrak.Object.warnMinutes description: Warn Minutes. type: number - contextPath: CimTrak.Object.contact description: Contact. type: string - contextPath: CimTrak.Object.createDate description: Create Date. type: string - contextPath: CimTrak.Object.description description: Description. type: string - contextPath: CimTrak.Object.location description: Location. type: string - contextPath: CimTrak.Object.name description: Name. type: string - contextPath: CimTrak.Object.objectPath description: Object Path. type: string - contextPath: CimTrak.Object.url description: URL. type: string - contextPath: CimTrak.Object.agentObjectId description: Agent Object Id. type: number - arguments: - description: Object Id. name: objectId description: Sends a request to the server to synchronize an object group. name: force-sync outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - arguments: - description: Object Detail Id. name: objectDetailId description: This function returns the contents of the requested file encoded in base64. name: view-file outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Sync.contents description: Contents. type: string - arguments: - description: Name. name: name - description: Object Id. name: objectId - description: Parameters for report. name: ReportParameters description: This function runs the report specified by the report name. The report name can be obtained from the getReportHeaders API. The report's parameters can be obtained from the getReportArguments API. name: run-report-by-name outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Sync.html description: HTML Report. type: string - arguments: - description: Date. name: date - description: Object Id. name: objectId description: Deploy By Date. name: deploy-by-date outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - arguments: - description: The object ID of the compliance policy. name: ObjectId - defaultValue: "-1" description: 'The record ID of the compliance scan. ' name: ComplianceScanId description: This function returns the benchmarks and/or compliance mappings for the compliance policy specified by the object ID. name: get-current-compliance-items outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.ComplianceItems.objectid description: Object ID. type: number - contextPath: CimTrak.ComplianceItems.type description: Type of item. type: number - contextPath: CimTrak.ComplianceItems.name description: Name. type: string - contextPath: CimTrak.ComplianceItems.description description: Description. type: string - contextPath: CimTrak.ComplianceItems.scanstarttime description: Scan Start Time. type: string - contextPath: CimTrak.ComplianceItems.scanendtime description: Scan End Time. type: string - contextPath: CimTrak.ComplianceItems.scanid description: Scan id. type: number - contextPath: CimTrak.ComplianceItems.compliancemappingid description: Compliance Mapping id. type: number - contextPath: CimTrak.ComplianceItems.id description: id. type: number - arguments: - defaultValue: "-1" description: Object Type to retrieve. name: ObjectType - defaultValue: "-1" description: Object Sub Type to retrieve. name: ObjectSubType - defaultValue: "-1" description: Parent ID to retrieve. name: ParentId - defaultValue: "-1" description: Object ID to retrieve. name: ObjectId - description: Object path and name to retrieve. name: ObjectPathAndName - defaultValue: "false" description: Recursive. name: Recursive description: Retrieves a list of objects. name: get-objects outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Objects.repositoryDisplayName description: Repository display name. type: string - contextPath: CimTrak.Objects.connected description: Connected. type: boolean - contextPath: CimTrak.Objects.agentObjectId description: Agent object Id. type: number - contextPath: CimTrak.Objects.description description: Description. type: string - contextPath: CimTrak.Objects.name description: Name. type: string - contextPath: CimTrak.Objects.objectPath description: Object Path. type: string - contextPath: CimTrak.Objects.agentIsFilesystem description: Agent is filesystem. type: boolean - contextPath: CimTrak.Objects.cancel description: Cancel. type: boolean - contextPath: CimTrak.Objects.logsByDays description: Logs by days. type: boolean - contextPath: CimTrak.Objects.requireNotes description: Require notes. type: boolean - contextPath: CimTrak.Objects.inService description: In service. type: string - contextPath: CimTrak.Objects.events description: Events. type: number - contextPath: CimTrak.Objects.intrusions description: Intrusions. type: number - contextPath: CimTrak.Objects.intrusionSize description: Intrusion size. type: number - contextPath: CimTrak.Objects.objectId description: Object ID. type: number - contextPath: CimTrak.Objects.objectStatus description: Object Status. type: number - contextPath: CimTrak.Objects.objectSubType description: object subtype. type: number - contextPath: CimTrak.Objects.objectType description: object type. type: number - contextPath: CimTrak.Objects.parentId description: Parent ID. type: number - contextPath: CimTrak.Objects.revisions description: Revisions. type: number - contextPath: CimTrak.Objects.templateId description: Template Id. type: number - contextPath: CimTrak.Objects.securityAdd description: Security add. type: boolean - contextPath: CimTrak.Objects.securityEdit description: Security edit. type: boolean - contextPath: CimTrak.Objects.securityLock description: Security lock. type: boolean - contextPath: CimTrak.Objects.securityReport description: Security report. type: boolean - contextPath: CimTrak.Objects.securityUnlock description: Security unlock. type: boolean - contextPath: CimTrak.Objects.securityView description: Security view. type: boolean - contextPath: CimTrak.Objects.warnMinutes description: Warn minutes. type: number - contextPath: CimTrak.Objects.contact description: Contact. type: string - contextPath: CimTrak.Objects.createDate description: Create date. type: string - contextPath: CimTrak.Objects.location description: Location. type: string - contextPath: CimTrak.Objects.url description: Url. type: string - contextPath: CimTrak.Objects.parentName description: Parent name. type: string - contextPath: CimTrak.Objects.children description: Children. type: number - contextPath: CimTrak.Objects.agentVersion description: Agent version. type: string - contextPath: CimTrak.Objects.agentBuild description: Agent build. type: number - contextPath: CimTrak.Objects.agentOsVersion description: Agent Os version. type: string - contextPath: CimTrak.Objects.agentIp description: agent Ip. type: string - contextPath: CimTrak.Objects.agentName description: Agent name. type: string - contextPath: CimTrak.Objects.agentInstalled description: Agent installed. type: boolean - arguments: - description: Object ID to retrieve compliance items. name: ObjectId description: Returns an array of agent information given an object ID. name: get-agent-info outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.AgentInfo.objectData description: Object data. type: string - contextPath: CimTrak.AgentInfo.objectsCustom description: Object custom. type: string - contextPath: CimTrak.AgentInfo.agentData description: Agent data. type: string - contextPath: CimTrak.AgentInfo.state description: State. type: string - arguments: - description: Object ID to retrieve compliance items. name: ObjectId - defaultValue: "-1" description: Compliance Scan ID to retrieve compliance items. name: ComplianceScanId - description: 'Filter array to limit results IE: [{name: id, operator:>, value:5}].' name: Filter - defaultValue: "1" description: Starting number of record to get. name: Start - defaultValue: "50" description: Ending number of record to get. name: End description: Returns compliance scans details. name: get-compliance-archive-details outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Compliance.testdate description: Test Date. type: string - contextPath: CimTrak.Compliance.datatype description: Data Type. type: string - contextPath: CimTrak.Compliance.scanid description: Scan id. type: number - contextPath: CimTrak.Compliance.ipaddress description: IP address. type: string - contextPath: CimTrak.Compliance.lobjectid description: Object Id. type: number - contextPath: CimTrak.Compliance.alternatesystemid description: Alternate System ID. type: string - contextPath: CimTrak.Compliance.agentuuid description: Agent uuid. type: string - contextPath: CimTrak.Compliance.agentname description: Agent name. type: string - contextPath: CimTrak.Compliance.objectpath description: Object path. type: string - contextPath: CimTrak.Compliance.benchmark description: Benchmark. type: string - contextPath: CimTrak.Compliance.profile description: Profile. type: string - contextPath: CimTrak.Compliance.test description: Test. type: string - contextPath: CimTrak.Compliance.pass description: Pass. type: boolean - contextPath: CimTrak.Compliance.iswaived description: Is waived. type: boolean - contextPath: CimTrak.Compliance.adjustedscore description: Adjusted score. type: number - contextPath: CimTrak.Compliance.possiblescore description: Possible score. type: number - contextPath: CimTrak.Compliance.rawscore description: Raws core. type: number - contextPath: CimTrak.Compliance.weight description: Weight. type: number - contextPath: CimTrak.Compliance.testran description: Test ran. type: boolean - contextPath: CimTrak.Compliance.remediation description: Remediation. type: string - contextPath: CimTrak.Compliance.severity description: Severity. type: string - contextPath: CimTrak.Compliance.version description: Version. type: string - contextPath: CimTrak.Compliance.rationale description: Rationale. type: string - contextPath: CimTrak.Compliance.description description: Description. type: string - contextPath: CimTrak.Compliance.assessment description: Assessment. type: string - contextPath: CimTrak.Compliance.disposition description: Disposition. type: string - contextPath: CimTrak.Compliance.conjunction description: Conjunction. type: string - contextPath: CimTrak.Compliance.negatatevalue description: Negatate value. type: boolean - contextPath: CimTrak.Compliance.comment description: Comment. type: string - contextPath: CimTrak.Compliance.controlversion description: Control version. type: string - contextPath: CimTrak.Compliance.controlnumber description: Control number. type: string - contextPath: CimTrak.Compliance.osversion description: OS version. type: string - contextPath: CimTrak.Compliance.personality description: Personality. type: string - contextPath: CimTrak.Compliance.objectid description: Object id. type: number - contextPath: CimTrak.Compliance.userId description: User id. type: number - contextPath: CimTrak.Compliance.block description: Lock. type: boolean - contextPath: CimTrak.Compliance.bunlock description: Unlock. type: boolean - contextPath: CimTrak.Compliance.bview description: View. type: boolean - contextPath: CimTrak.Compliance.bedit description: Edit. type: boolean - contextPath: CimTrak.Compliance.badd description: Add. type: boolean - contextPath: CimTrak.Compliance.breports description: Reports. type: boolean - contextPath: CimTrak.Compliance.blogon description: Logon. type: boolean - contextPath: CimTrak.Compliance.isadmin description: Is admin. type: boolean - arguments: - description: Object ID to retrieve compliance items. name: ObjectId - defaultValue: "-1" description: Compliance Scan ID to retrieve compliance items. name: ComplianceScanId - description: 'Filter array to limit results IE: [{name: id, operator:>, value:5}].' name: Filter - defaultValue: "1" description: Starting number of record to get. name: Start - defaultValue: "50" description: Ending number of record to get. name: End description: Returns compliance scans summary. name: get-compliance-archive-summary outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Compliance.testdate description: Test Date. type: string - contextPath: CimTrak.Compliance.scanid description: Scan id. type: number - contextPath: CimTrak.Compliance.ipaddress description: IP address. type: string - contextPath: CimTrak.Compliance.datatype description: Data Type. type: string - contextPath: CimTrak.Compliance.alternatesystemid description: Alternate System ID. type: string - contextPath: CimTrak.Compliance.agentuuid description: Agent uuid. type: string - contextPath: CimTrak.Compliance.agentname description: Agent name. type: string - contextPath: CimTrak.Compliance.objectpath description: Object path. type: string - contextPath: CimTrak.Compliance.lobjectid description: Object Id. type: number - contextPath: CimTrak.Compliance.benchmark description: Benchmark. type: string - contextPath: CimTrak.Compliance.profile description: Profile. type: string - contextPath: CimTrak.Compliance.totalfailcount description: Total fail count. type: number - contextPath: CimTrak.Compliance.totalpasscount description: Total pass count. type: number - contextPath: CimTrak.Compliance.totaltestsskipped description: Total tests skipped. type: number - contextPath: CimTrak.Compliance.totalwaivecount description: Total waive count. type: number - contextPath: CimTrak.Compliance.pass description: Pass. type: boolean - contextPath: CimTrak.Compliance.totaltestsran description: Total tests ran. type: number - contextPath: CimTrak.Compliance.osversion description: OS version. type: string - contextPath: CimTrak.Compliance.personality description: Personality. type: string - contextPath: CimTrak.Compliance.userId description: User id. type: number - contextPath: CimTrak.Compliance.objectid description: Object id. type: number - contextPath: CimTrak.Compliance.block description: Lock. type: boolean - contextPath: CimTrak.Compliance.bunlock description: Unlock. type: boolean - contextPath: CimTrak.Compliance.bview description: View. type: boolean - contextPath: CimTrak.Compliance.bedit description: Edit. type: boolean - contextPath: CimTrak.Compliance.badd description: Add. type: boolean - contextPath: CimTrak.Compliance.breports description: Reports. type: boolean - contextPath: CimTrak.Compliance.blogon description: Logon. type: boolean - arguments: - description: Parent Object Id. name: objectParentId description: Launch compliance scan for all children of object. name: compliance-scan-children outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - arguments: - description: Object Id. name: objectId - defaultValue: "20" description: Number of times to retry to check if scan has completed. name: retryCount - defaultValue: "10" description: Number of seconds to wait before retry to check if scan completed. name: retrySeconds description: Launch compliance scan for object and return results. name: compliance-scan-with-summary outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Compliance.testdate description: Test Date. type: string - contextPath: CimTrak.Compliance.scanid description: Scan id. type: number - contextPath: CimTrak.Compliance.ipaddress description: IP address. type: string - contextPath: CimTrak.Compliance.datatype description: Data Type. type: string - contextPath: CimTrak.Compliance.alternatesystemid description: Alternate System ID. type: string - contextPath: CimTrak.Compliance.agentuuid description: Agent uuid. type: string - contextPath: CimTrak.Compliance.agentname description: Agent name. type: string - contextPath: CimTrak.Compliance.objectpath description: Object path. type: string - contextPath: CimTrak.Compliance.lobjectid description: Object Id. type: number - contextPath: CimTrak.Compliance.benchmark description: Benchmark. type: string - contextPath: CimTrak.Compliance.profile description: Profile. type: string - contextPath: CimTrak.Compliance.totalfailcount description: Total fail count. type: number - contextPath: CimTrak.Compliance.totalpasscount description: Total pass count. type: number - contextPath: CimTrak.Compliance.totaltestsskipped description: Total tests skipped. type: number - contextPath: CimTrak.Compliance.totalwaivecount description: Total waive count. type: number - contextPath: CimTrak.Compliance.pass description: Pass. type: boolean - contextPath: CimTrak.Compliance.totaltestsran description: Total tests ran. type: number - contextPath: CimTrak.Compliance.osversion description: OS version. type: string - contextPath: CimTrak.Compliance.personality description: Personality. type: string - contextPath: CimTrak.Compliance.userId description: User id. type: number - contextPath: CimTrak.Compliance.objectid description: Object id. type: number - contextPath: CimTrak.Compliance.block description: Lock. type: boolean - contextPath: CimTrak.Compliance.bunlock description: Unlock. type: boolean - contextPath: CimTrak.Compliance.bview description: View. type: boolean - contextPath: CimTrak.Compliance.bedit description: Edit. type: boolean - contextPath: CimTrak.Compliance.badd description: Add. type: boolean - contextPath: CimTrak.Compliance.breports description: Reports. type: boolean - contextPath: CimTrak.Compliance.blogon description: Logon. type: boolean - arguments: - description: Alternate system Id. name: alternateSystemId description: Get agent object id from alternate system id. name: get-agent-object-id-by-alternate-system-id outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Object.agentObjectId description: Object Id of agent. type: number - arguments: - description: Agent name. name: agentName description: Get agent object from agent name. name: get-agent-object-by-name outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Object.agentIsFilesystem description: Agent Is Filesystem. type: boolean - contextPath: CimTrak.Object.cancel description: Cancel. type: boolean - contextPath: CimTrak.Object.connected description: Connected. type: boolean - contextPath: CimTrak.Object.logsByDays description: Logs By Days. type: boolean - contextPath: CimTrak.Object.requireNotes description: Require Notes. type: boolean - contextPath: CimTrak.Object.inService description: In Service. type: string - contextPath: CimTrak.Object.children description: Children. type: number - contextPath: CimTrak.Object.events description: Events. type: number - contextPath: CimTrak.Object.intrusions description: Intrusions. type: number - contextPath: CimTrak.Object.intrusionSize description: Intrusion Size. type: number - contextPath: CimTrak.Object.objectId description: Object Id. type: number - contextPath: CimTrak.Object.objectStatus description: Object Status. type: number - contextPath: CimTrak.Object.objectSubType description: Object SubType. type: number - contextPath: CimTrak.Object.objectType description: Object Type. type: number - contextPath: CimTrak.Object.parentId description: Parent Id. type: number - contextPath: CimTrak.Object.revisions description: Revisions. type: number - contextPath: CimTrak.Object.templateId description: Template Id. type: number - contextPath: CimTrak.Object.securityAdd description: Security Add. type: boolean - contextPath: CimTrak.Object.securityEdit description: Security Edit. type: boolean - contextPath: CimTrak.Object.securityLock description: Security Lock. type: boolean - contextPath: CimTrak.Object.securityReport description: Security Report. type: boolean - contextPath: CimTrak.Object.securityUnlock description: Security Unlock. type: boolean - contextPath: CimTrak.Object.securityView description: Security View. type: boolean - contextPath: CimTrak.Object.warnMinutes description: Warn Minutes. type: number - contextPath: CimTrak.Object.contact description: Contact. type: string - contextPath: CimTrak.Object.createDate description: Create Date. type: string - contextPath: CimTrak.Object.description description: Description. type: string - contextPath: CimTrak.Object.location description: Location. type: string - contextPath: CimTrak.Object.name description: Name. type: string - contextPath: CimTrak.Object.objectPath description: Object Path. type: string - contextPath: CimTrak.Object.url description: URL. type: string - contextPath: CimTrak.Object.agentObjectId description: Agent Object Id. type: number - arguments: - description: Agent alternate id. name: alternateSystemId description: Get agent object from alternate id. name: get-agent-object-by-alternate-id outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Object.agentIsFilesystem description: Agent Is Filesystem. type: boolean - contextPath: CimTrak.Object.cancel description: Cancel. type: boolean - contextPath: CimTrak.Object.connected description: Connected. type: boolean - contextPath: CimTrak.Object.logsByDays description: Logs By Days. type: boolean - contextPath: CimTrak.Object.requireNotes description: Require Notes. type: boolean - contextPath: CimTrak.Object.inService description: In Service. type: string - contextPath: CimTrak.Object.children description: Children. type: number - contextPath: CimTrak.Object.events description: Events. type: number - contextPath: CimTrak.Object.intrusions description: Intrusions. type: number - contextPath: CimTrak.Object.intrusionSize description: Intrusion Size. type: number - contextPath: CimTrak.Object.objectId description: Object Id. type: number - contextPath: CimTrak.Object.objectStatus description: Object Status. type: number - contextPath: CimTrak.Object.objectSubType description: Object SubType. type: number - contextPath: CimTrak.Object.objectType description: Object Type. type: number - contextPath: CimTrak.Object.parentId description: Parent Id. type: number - contextPath: CimTrak.Object.revisions description: Revisions. type: number - contextPath: CimTrak.Object.templateId description: Template Id. type: number - contextPath: CimTrak.Object.securityAdd description: Security Add. type: boolean - contextPath: CimTrak.Object.securityEdit description: Security Edit. type: boolean - contextPath: CimTrak.Object.securityLock description: Security Lock. type: boolean - contextPath: CimTrak.Object.securityReport description: Security Report. type: boolean - contextPath: CimTrak.Object.securityUnlock description: Security Unlock. type: boolean - contextPath: CimTrak.Object.securityView description: Security View. type: boolean - contextPath: CimTrak.Object.warnMinutes description: Warn Minutes. type: number - contextPath: CimTrak.Object.contact description: Contact. type: string - contextPath: CimTrak.Object.createDate description: Create Date. type: string - contextPath: CimTrak.Object.description description: Description. type: string - contextPath: CimTrak.Object.location description: Location. type: string - contextPath: CimTrak.Object.name description: Name. type: string - contextPath: CimTrak.Object.objectPath description: Object Path. type: string - contextPath: CimTrak.Object.url description: URL. type: string - contextPath: CimTrak.Object.agentObjectId description: Agent Object Id. type: number - arguments: - description: Agent alternate id. name: ip description: Get agent object from ip address. name: get-agent-object-by-ip outputs: - contextPath: CommandStatus.status description: Status of request. type: string - contextPath: CommandStatus.errorCode description: Error Code of request. type: string - contextPath: CommandStatus.errorDescription description: Error description of request. type: string - contextPath: CimTrak.Object.agentIsFilesystem description: Agent Is Filesystem. type: boolean - contextPath: CimTrak.Object.cancel description: Cancel. type: boolean - contextPath: CimTrak.Object.connected description: Connected. type: boolean - contextPath: CimTrak.Object.logsByDays description: Logs By Days. type: boolean - contextPath: CimTrak.Object.requireNotes description: Require Notes. type: boolean - contextPath: CimTrak.Object.inService description: In Service. type: string - contextPath: CimTrak.Object.children description: Children. type: number - contextPath: CimTrak.Object.events description: Events. type: number - contextPath: CimTrak.Object.intrusions description: Intrusions. type: number - contextPath: CimTrak.Object.intrusionSize description: Intrusion Size. type: number - contextPath: CimTrak.Object.objectId description: Object Id. type: number - contextPath: CimTrak.Object.objectStatus description: Object Status. type: number - contextPath: CimTrak.Object.objectSubType description: Object SubType. type: number - contextPath: CimTrak.Object.objectType description: Object Type. type: number - contextPath: CimTrak.Object.parentId description: Parent Id. type: number - contextPath: CimTrak.Object.revisions description: Revisions. type: number - contextPath: CimTrak.Object.templateId description: Template Id. type: number - contextPath: CimTrak.Object.securityAdd description: Security Add. type: boolean - contextPath: CimTrak.Object.securityEdit description: Security Edit. type: boolean - contextPath: CimTrak.Object.securityLock description: Security Lock. type: boolean - contextPath: CimTrak.Object.securityReport description: Security Report. type: boolean - contextPath: CimTrak.Object.securityUnlock description: Security Unlock. type: boolean - contextPath: CimTrak.Object.securityView description: Security View. type: boolean - contextPath: CimTrak.Object.warnMinutes description: Warn Minutes. type: number - contextPath: CimTrak.Object.contact description: Contact. type: string - contextPath: CimTrak.Object.createDate description: Create Date. type: string - contextPath: CimTrak.Object.description description: Description. type: string - contextPath: CimTrak.Object.location description: Location. type: string - contextPath: CimTrak.Object.name description: Name. type: string - contextPath: CimTrak.Object.objectPath description: Object Path. type: string - contextPath: CimTrak.Object.url description: URL. type: string - contextPath: CimTrak.Object.agentObjectId description: Agent Object Id. type: number dockerimage: demisto/python3:3.12.13.10116658 isfetch: true longRunning: true script: '' subtype: python3 type: python fromversion: 6.0.0 tests: - No tests (auto formatted)