GCenter

This integration allows, via about twenty commands, to interact with the GCenter appliance via its API.

Network Security · Gatewatcher AionIQ

Configuration parameters

gw-add-dga-list-entry
Add dga whitelist/blacklist entry.
gw-add-ignore-asset-name
Ignore asset name.
gw-add-ignore-kuser-ip
Ignore kuser IP.
gw-add-ignore-kuser-name
Ignore kuser name.
gw-add-ignore-mac-address
Ignore mac address.
gw-add-malcore-list-entry
Add malcore whitelist/blacklist entry.
gw-del-dga-list-entry
Delete dga whitelist/blacklist entry.
gw-del-ignore-asset-name
Delete an ignore asset ID.
gw-del-ignore-kuser-ip
Delete an ignore kuser IP ID.
gw-del-ignore-kuser-name
Delete an ignore kuser name ID.
gw-del-ignore-mac-address
Delete an ignore mac address ID.
gw-del-malcore-list-entry
Delete malcore whitelist/blacklist entry.
gw-es-query
Get Elasticsearch data.
gw-es-wrapper
Get Elasticsearch data using a wrapper.
gw-get-alert
Get an alert by it's uid.
gw-get-dga-list-entry
Get the dga whitelist/blacklist.
gw-get-file-infected
Get a file from an uuid. If there is no uuid, get all the files infected from a time interval.
gw-get-ignore-asset-name
Get all the ignored asset names.
gw-get-ignore-kuser-ip
Get all the ignored kuser IP.
gw-get-ignore-kuser-name
Get all the ignored kuser name.
gw-get-ignore-mac-address
Get all the ignored mac addresses.
gw-get-malcore-list-entry
Get the malcore whitelist/blacklist.
gw-list-alerts Deprecated
List all alerts (Deprecated. use gw-es-wrapper command instead).
gw-send-malware
Send malware.
gw-send-powershell
Send powershell.
gw-send-shellcode
Send shellcode.