Guidance Encase Endpoint

Use the Enterprise Service Bus (ESB) to request scans of specified endpoints.

Details

ID	`Guidance Encase Endpoint`
Provider	OpenText
Category	Endpoint
From Version	5.0.0
Supported Modules	Agentix XSIAM

Configuration parameters

server — Server URL (e.g. https://192.168.0.1)
port — Port (required)
proxy — Use system proxy settings
insecure — Trust any certificate (not secure)

Commands (3)

encase-copyjob
This command runs the Encase Endpoint copy job
encase-snapshot
This command runs the Encase Endpoint snapshot
encase-verifyhash
This command finds if a given hash is active on an endpoint

Source

GuidanceEncaseEndpoint.js GuidanceEncaseEndpoint.yml GuidanceEncaseEndpoint_description.md

Download History Raw


The EnCase Endpoint Security product includes the Enterprise Service Bus (ESB), which is a RESTful API allowing partner products to request scans of specified endpoints.
Make sure that the Examiner Service is running so the job can be run.