Configuration parameters
server— Server URL (e.g. https://192.168.0.1:3000) (required)credentials— Credentials (required)version— Version (required)insecure— Trust any certificate (not secure)proxy— Use system proxy settingsisFetch— Fetch incidentsincidentType— Incident typefetch_limit— Fetch limitincidentFetchInterval— Incidents Fetch Interval
Commands (19)
-
fireeye-hx-append-conditionsDeprecatedAdd conditions to an indicator. Conditions can be MD5, hash values, domain names and IP addresses.
-
fireeye-hx-cancel-containmentDeprecatedRelease a specific host from containment.
-
fireeye-hx-create-indicatorDeprecatedCreate new indicator.
-
fireeye-hx-data-acquisitionDeprecatedStart a data acquisition process to gather artifacts from the system disk and memory. The data is fetched as mans file.
-
fireeye-hx-delete-data-acquisitionDeprecatedDelete data acquisition.
-
fireeye-hx-delete-file-acquisitionDeprecatedDelete the file acquisition, by ID.
-
fireeye-hx-file-acquisitionDeprecatedAquire a specific file as a password protected zip file. The password for unlocking the zip file is 'unzip-me'.
-
fireeye-hx-get-alertDeprecatedGet details of a specific alert.
-
fireeye-hx-get-alertsDeprecatedGet a list of alerts, use the different arguments to filter the results returned.
-
fireeye-hx-get-all-hosts-informationDeprecatedGet information on all hosts.
-
fireeye-hx-get-data-acquisitionDeprecatedGather artifacts from the system disk and memory for the given acquisition id. The data is fetched as mans file.
-
fireeye-hx-get-host-informationDeprecatedGet information on a host associated with an agent.
-
fireeye-hx-get-host-set-informationDeprecatedGet a list of all host sets known to your HX Series appliance.
-
fireeye-hx-get-indicatorDeprecatedGet a specific indicator details.
-
fireeye-hx-get-indicatorsDeprecatedGet a list of indicators.
-
fireeye-hx-host-containmentDeprecatedApply containment for a specific host, so that it no longer has access to other systems.
-
fireeye-hx-initiate-data-acquisitionDeprecatedInitiate a data acquisition process to gather artifacts from the system disk and memory.
-
fireeye-hx-searchDeprecatedSearch endpoints to check all hosts or a subset of hosts for a specific file or indicator.
-
fireeye-hx-suppress-alertDeprecatedSuppress alert by ID.