Infinipoint

Use the Infinipoint integration to retrieve security and policy incompliance events, vulnerabilities or incidents. Investigate and respond to events in real-time.

Network Security · Infinipoint

Details

IDInfinipoint
ProviderInfinipoint
CategoryNetwork Security
From Version5.0.0
Docker Imagedemisto/auth-utils:1.0.0.3562326
Supported ModulesAgentix XSIAM

README

Configure Infinipoint in Cortex

Parameter Description Required
access_key Access Key True
private_key Private Key True
isFetch Fetch incidents False
incident_type Incident type - event, alert False
max_fetch Maximum number of incidents per fetch False
first_fetch First fetch time False
insecure Trust any certificate (not secure) False
proxy Use system proxy settings False
incidentType Incident type False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

infinipoint-get-vulnerable-devices

Get Vulnerable Devices

Base Command

infinipoint-get-vulnerable-devices

Input

Argument Name Description Required
device_os The device operating system, e.g. Ubutnu, Amazon Linux AMI, CentOS, etc Optional
device_risk Device risk score Optional

Context Output

Path Type Description
Infinipoint.Vulnerability.Devices.$device String Infinipoint device ID
Infinipoint.Vulnerability.Devices.$host String Hostname
Infinipoint.Vulnerability.Devices.cve_id Unknown CVE id
Infinipoint.Vulnerability.Devices.device_risk Number Device risk level
Infinipoint.Vulnerability.Devices.device_risk_type Number Device risk type
Infinipoint.Vulnerability.Devices.software_name Unknown Vulnerabilities software name
Infinipoint.Vulnerability.Devices.vulnerability_count Number Vulnerabilities count

Command Example

!infinipoint-get-vulnerable-devices device_risk=3

Context Example

{
    "Infinipoint": {
        "Vulnerability": {
            "Devices": [
                {
                    "$device": "XXXX-XXXX-XXXX-XXXX-XXXX",
                    "$host": "ubuntu-test",
                    "cve_id": null,
                    "device_risk": 10,
                    "device_risk_type": 4,
                    "mac_address": "-",
                    "os_name": "Ubuntu",
                    "platform": "ubuntu",
                    "software_name": null,
                    "vulnerability_count": 245
                },
                {
                    "$device": "XXXX-XXXX-YYYY-XXXX-YYYY",
                    "$host": "DESKTOP-test",
                    "cve_id": null,
                    "device_risk": 6.34,
                    "device_risk_type": 3,
                    "mac_address": "-",
                    "os_name": "Microsoft Windows 10 Enterprise Evaluation",
                    "platform": "windows",
                    "software_name": null,
                    "vulnerability_count": 83
                }
            ]
        }
    }
}

Human Readable Output

Results

$device $host cve_id device_risk device_risk_type mac_address os_name platform software_name vulnerability_count
XXXX-XXXX-XXXX-XXXX-XXXX OSX-Machine   10 4 - Mac OS X 10.15.3 darwin   103
XXXX-XXXX-XXXX-XXXX-YYYY ubuntu   10 4 - Ubuntu ubuntu   245
XXXX-XXXX-XXXX-XXXX-WWWW DESKTOP-Machine   6.34 3 - Microsoft Windows 10 Enterprise Evaluation windows   83

infinipoint-get-assets-programs

infinipoint get assets programs

Base Command

infinipoint-get-assets-programs

Input

Argument Name Description Required
name Software name, e.g. VMware Optional
publisher Software publisher name, e.g. Microsoft Corporation Optional
version Software version, e.g. 12.0.21005 Optional

Context Output

Path Type Description
Infinipoint.Assets.Programs.items.$device String Infinipoint device ID
Infinipoint.Assets.Programs.items.$host String Hostname
Infinipoint.Assets.Programs.items.$time Number Timestamp
Infinipoint.Assets.Programs.items.$type String Assets type
Infinipoint.Assets.Programs.items.name String Programs name
Infinipoint.Assets.Programs.items.os_type String OS type - 1 = Windows, 2 = Linux, 4 = macOS
Infinipoint.Assets.Programs.items.program_exists String Software exists on disk
Infinipoint.Assets.Programs.items.publisher String Software publisher name
Infinipoint.Assets.Programs.items.version String Software version
Infinipoint.Assets.Programs.items.install_update_date Date Install update date
Infinipoint.Assets.Programs.itemsTotal Number Total software

Command Example

!infinipoint-get-assets-programs name="VMware"

Context Example

{
    "Infinipoint": {
        "Assets": {
            "Programs": [
                {
                    "$device": "XXXX-XXXX-XXXX-XXXX-XXXX",
                    "$host": "ubuntu-VM",
                    "$time": "2020-08-04T10:30:37+00:00",
                    "$type": "csv",
                    "name": "xserver-xorg-video-vmware-hwe-18.04",
                    "os_type": "2",
                    "program_exists": "",
                    "publisher": "",
                    "version": "1:13.3.0-2build1~18.04.1"
                },
                {
                    "$device": "XXXX-XXXX-XXXX-XXXX-YYYY",
                    "$host": "DESKTOP-VM",
                    "$time": "2020-07-13T10:52:59+00:00",
                    "$type": "csv",
                    "install_update_date": "2020-05-21",
                    "name": "VMware Tools",
                    "os_type": "1",
                    "program_exists": "Found On Disk",
                    "publisher": "VMware, Inc.",
                    "version": "11.0.5.15389592"
                }
            ]
        }
    }
}

Human Readable Output

Results

$device $host $time $type name os_type program_exists publisher version
XXXX-XXXX-XXXX-XXXX-XXXX ubuntu-VM 2020-07-20T09:13:31+00:00 csv xserver-xorg-video-vmware-hwe-18.04 2     1:13.3.0-2build1~18.04.1
XXXX-XXXX-XXXX-XXXX-YYYY ubuntu-VM 2020-08-04T10:30:37+00:00 csv xserver-xorg-video-vmware-hwe-18.04 2     1:13.3.0-2build1~18.04.1
XXXX-XXXX-XXXX-XXXX-ZZZZ DESKTOP-VM 2020-07-13T10:52:59+00:00 csv VMware Tools 1 Found On Disk VMware, Inc. 11.0.5.15389592

infinipoint-get-cve

infinipoint get cve

Base Command

infinipoint-get-cve

Input

Argument Name Description Required
cve_id cve id, e.g. CVE-2020-1301 Required

Context Output

Path Type Description
Infinipoint.Cve.Details.campaign_intelligence.apt String apt
Infinipoint.Cve.Details.campaign_intelligence.description String CVE description
Infinipoint.Cve.Details.campaign_intelligence.targeted_countries String CVE targeted countries
Infinipoint.Cve.Details.campaign_intelligence.targeted_industries String CVE targeted industries
Infinipoint.Cve.Details.cve_description String CVE description
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.ac_insuf_info String ac insuf info
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.access_vector String access vector
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.attack_complexity String attack complexity
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.authentication String authentication
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.availability_impact String availability impact
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.base_score String base score
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.confidentiality_impact String confidentiality impact
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.exploitability_score String exploitability score
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.impact_score String impact score
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2. String integrity impact
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.obtain_all_privilege String obtain all privilege
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.obtain_other_privilege String obtain other privilege
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.obtain_user_privilege String obtain user privilege
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.severity String severity
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.user_interaction_required String user interaction required
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.vector_string String vector string
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.attack_complexity String attack complexity
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.attack_vector String attack vector
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.availability_impact String availability impact
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.base_score String base score
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.base_severity String base severity
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.confidentiality_impact String confidentiality impact
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.exploitability_score String exploitability score
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.impact_score String impact score
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.integrity_impact String integrity impact
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.privileges_required String privileges required
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.scope String scope
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.user_interaction String user interaction
Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.vector_string String vector string
Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.attack_complexity String attack complexity
Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.campaigns Number campaigns
Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.device_count Number device count
Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.exploitability_risk String exploitability risk
Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.exploits Number exploits
Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.risk_label String risk label
Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.risk_level Number risk level
Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.risk_type Number risk type
Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.trends_level String trends level
Infinipoint.Cve.Details.cve_id String cve id
Infinipoint.Cve.Details.cwe_description String cwe description
Infinipoint.Cve.Details.cwe_id String cwe id
Infinipoint.Cve.Details.devices.$device String Infinipoint device ID
Infinipoint.Cve.Details.devices.device_name_string String Device name
Infinipoint.Cve.Details.devices.device_os String Device OS
Infinipoint.Cve.Details.devices.device_risk Number Device risk
Infinipoint.Cve.Details.devices.map_id String Infinipoint map id
Infinipoint.Cve.Details.devices.vulnerableProduct String Vulnerable product
Infinipoint.Cve.Details.devices.vulnerableVersion String Vulnerable Version
Infinipoint.Cve.Details.scan_date Unknown scan date
Infinipoint.Cve.Details.software_list.cpe_name_string String cpe name string
Infinipoint.Cve.Details.software_list.cpe_type String cpe type
Infinipoint.Cve.Details.top_devices.$device String Infinipoint device ID
Infinipoint.Cve.Details.top_devices.device_name_string String Device name
Infinipoint.Cve.Details.top_devices.device_os String Device OS
Infinipoint.Cve.Details.top_devices.device_risk Number Device risk
Infinipoint.Cve.Details.top_devices.map_id String Infinipoint map id
Infinipoint.Cve.Details.top_devices.vulnerableProduct String Vulnerable product
Infinipoint.Cve.Details.top_devices.vulnerableVersion String Vulnerable version

Command Example

!infinipoint-get-cve cve_id="CVE-2020-9859"

Context Example

{
    "CVE": {
        "CVSS": "7.2",
        "Description": "A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.",
        "ID": "CVE-2020-9859"
    },
    "DBotScore": {
        "Indicator": "CVE-2020-9859",
        "Score": 0,
        "Type": "cve",
        "Vendor": null
    },
    "Infinipoint": {
        "Cve": {
            "Details": {
                "campaign_intelligence": [
                    {
                        "apt": "Publicly Available Exploit",
                        "description": "The zero-day vulnerability tracked as CVE-2020-9859 is exploited by the Unc0ver jailbreak tool ",
                        "targeted_countries": [
                            ""
                        ],
                        "targeted_industries": [
                            ""
                        ]
                    }
                ],
                "cve_description": "A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.",
                "cve_dynamic_data": {
                    "base_metric_v2": {
                        "ac_insuf_info": "False",
                        "access_vector": "LOCAL",
                        "attack_complexity": "LOW",
                        "authentication": "NONE",
                        "availability_impact": "COMPLETE",
                        "base_score": "7.2",
                        "confidentiality_impact": "COMPLETE",
                        "exploitability_score": "3.9",
                        "impact_score": "10.0",
                        "integrity_impact": "COMPLETE",
                        "obtain_all_privilege": "False",
                        "obtain_other_privilege": "False",
                        "obtain_user_privilege": "False",
                        "severity": "HIGH",
                        "user_interaction_required": "False",
                        "vector_string": "AV:L/AC:L/Au:N/C:C/I:C/A:C"
                    },
                    "base_metric_v3": {
                        "attack_complexity": "LOW",
                        "attack_vector": "LOCAL",
                        "availability_impact": "HIGH",
                        "base_score": "7.8",
                        "base_severity": "HIGH",
                        "confidentiality_impact": "HIGH",
                        "exploitability_score": "1.8",
                        "impact_score": "5.9",
                        "integrity_impact": "HIGH",
                        "privileges_required": "LOW",
                        "scope": "UNCHANGED",
                        "user_interaction": "NONE",
                        "vector_string": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
                    },
                    "infinipoint_base_metric": {
                        "attack_complexity": "10",
                        "campaigns": 1,
                        "device_count": 1,
                        "exploitability_risk": "3.9",
                        "exploits": 1,
                        "risk_label": "Critical",
                        "risk_level": 10,
                        "risk_type": 4,
                        "trends_level": "10"
                    }
                },
                "cve_id": "CVE-2020-9859",
                "cwe_description": "Uncontrolled Resource Consumption (Resource Exhaustion)",
                "cwe_id": "CWE-400",
                "devices": [
                    {
                        "$device": "XXXX-XXXX-XXXX-XXXX-YYYY",
                        "device_name_string": "OSX-Machine",
                        "device_os": "Mac OS X 10.15.3",
                        "device_risk": 10,
                        "is_managed": true,
                        "map_id": "XXXX-XXXX-XXXX-XXXX-YYYY",
                        "vulnerableProduct": "Mac OS X 10.15.3",
                        "vulnerableVersion": "Mac OS X 10.15.3"
                    }
                ],
                "scan_date": null,
                "software_list": [
                    {
                        "cpe_name_string": "Mac OS X 10.15.3 10.15.3",
                        "cpe_strings": [],
                        "cpe_type": "OS_ONLY"
                    }
                ],
                "top_devices": [
                    {
                        "$device": "XXXX-XXXX-XXXX-XXXX-YYYY",
                        "device_name_string": "OSX-Machine",
                        "device_os": "Mac OS X 10.15.3",
                        "device_risk": 10,
                        "is_managed": true,
                        "map_id": "XXXX-XXXX-XXXX-XXXX-YYYY",
                        "vulnerableProduct": "Mac OS X 10.15.3",
                        "vulnerableVersion": "Mac OS X 10.15.3"
                    }
                ]
            }
        }
    }
}

Human Readable Output

Results

campaign_intelligence cve_description cve_dynamic_data cve_id cwe_description cwe_id devices scan_date software_list top_devices
{‘apt’: ‘Publicly Available Exploit’, ‘description’: ‘The zero-day vulnerability tracked as CVE-2020-9859 is exploited by the Unc0ver jailbreak tool ‘, ‘targeted_countries’: [’’], ‘targeted_industries’: [’’]} A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges. infinipoint_base_metric: {“device_count”: 1, “risk_level”: 10, “attack_complexity”: “10”, “campaigns”: 1, “exploits”: 1, “trends_level”: “10”, “exploitability_risk”: “3.9”, “risk_label”: “Critical”, “risk_type”: 4}
base_metric_v2: {“vector_string”: “AV:L/AC:L/Au:N/C:C/I:C/A:C”, “access_vector”: “LOCAL”, “attack_complexity”: “LOW”, “authentication”: “NONE”, “confidentiality_impact”: “COMPLETE”, “integrity_impact”: “COMPLETE”, “availability_impact”: “COMPLETE”, “base_score”: “7.2”, “severity”: “HIGH”, “exploitability_score”: “3.9”, “impact_score”: “10.0”, “ac_insuf_info”: “False”, “obtain_all_privilege”: “False”, “obtain_other_privilege”: “False”, “obtain_user_privilege”: “False”, “user_interaction_required”: “False”}
base_metric_v3: {“vector_string”: “CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H”, “attack_vector”: “LOCAL”, “attack_complexity”: “LOW”, “privileges_required”: “LOW”, “user_interaction”: “NONE”, “scope”: “UNCHANGED”, “confidentiality_impact”: “HIGH”, “integrity_impact”: “HIGH”, “availability_impact”: “HIGH”, “base_score”: “7.8”, “base_severity”: “HIGH”, “exploitability_score”: “1.8”, “impact_score”: “5.9”}		 CVE-2020-9859 Uncontrolled Resource Consumption (Resource Exhaustion) CWE-400 {‘$device’: ‘XXXX-XXXX-XXXX-XXXX-YYYY’, ‘device_name_string’: ‘OSX-Machine’, ‘vulnerableProduct’: ‘Mac OS X 10.15.3’, ‘vulnerableVersion’: ‘Mac OS X 10.15.3’, ‘device_risk’: 10, ‘map_id’: ‘XXXX-XXXX-XXXX-XXXX-YYYY’, ‘device_os’: ‘Mac OS X 10.15.3’, ‘is_managed’: True}   {‘cpe_name_string’: ‘Mac OS X 10.15.3 10.15.3’, ‘cpe_type’: ‘OS_ONLY’, ‘cpe_strings’: []} {‘$device’: ‘XXXX-XXXX-XXXX-XXXX-YYYY’, ‘device_name_string’: ‘OSX-Machine’, ‘vulnerableProduct’: ‘Mac OS X 10.15.3’, ‘vulnerableVersion’: ‘Mac OS X 10.15.3’, ‘device_risk’: 10, ‘map_id’: ‘XXXX-XXXX-XXXX-XXXX-YYYY’, ‘device_os’: ‘Mac OS X 10.15.3’, ‘is_managed’: True}

infinipoint-get-device

get device

Base Command

infinipoint-get-device

Input

Argument Name Description Required
host hostname, e.g. DESKTOP-CIK123 Optional
osType choose a OS type - 1 = Windows | 2 = Linux | 4 = macOS Optional
osName Device operating system full name e.g. windows-10.0.18363.836 Optional
status Device current status:- 0 = Offline | 1 = Online Optional
agentVersion Infinipoint agent version, e.g. 3.200.10.0 Optional

Context Output

Path Type Description
Infinipoint.Devices.agentVersion String Infinipoint agent version
Infinipoint.Devices.clientType Number Client type
Infinipoint.Devices.discoveryId String Infinipoint discovery id
Infinipoint.Devices.domain String Domin name
Infinipoint.Devices.edge Number Infinipoint edge
Infinipoint.Devices.ftDidRespond Number ftDidRespond
Infinipoint.Devices.ftIsSuccessful Number ftIsSuccessful
Infinipoint.Devices.ftResult String ftResult
Infinipoint.Devices.gatewayIp Number Getway IP
Infinipoint.Devices.gatewayMACAddress Date Gateway MAC Address
Infinipoint.Devices.host String hostname
Infinipoint.Devices.id String Infinipoint device id
Infinipoint.Devices.ip Number IP address
Infinipoint.Devices.lastSeen Date Last Seen device
Infinipoint.Devices.macAddress String MAC Address
Infinipoint.Devices.networkId Number Infinipoint network ID
Infinipoint.Devices.networks.alias String Networks alias
Infinipoint.Devices.networks.cidr String cidr
Infinipoint.Devices.networks.gatewayIp Number Gateway IP
Infinipoint.Devices.networks.gatewayMACAddress Date Gateway MACAddress
Infinipoint.Devices.osName String OS name
Infinipoint.Devices.osType Number OS Type
Infinipoint.Devices.policyVersion String Infinipoint policy version
Infinipoint.Devices.productType String Product type
Infinipoint.Devices.regDate Date Register date
Infinipoint.Devices.status Number Infinipoint Device status
Infinipoint.Devices.statusCode Unknown Infinipoint status Code
Infinipoint.Devices.statusDescription Unknown Infinipoint status Description
Infinipoint.Devices.supportId Unknown Infinipoint support Id
Infinipoint.Devices.tags.color String Tag color
Infinipoint.Devices.tags.name String Tag name
Infinipoint.Devices.tags.tagId String Infinipoint Tag ID
Infinipoint.Devices.uniqueHostname String Infinipoint unique Hostname

Command Example

!infinipoint-get-device osType=1

Context Example

{
    "Infinipoint": {
        "Devices": {
            "agentVersion": "3.200.20.0",
            "clientType": 0,
            "discoveryId": "",
            "domain": "WORKGROUP",
            "edge": true,
            "ftDidRespond": false,
            "ftIsSuccessful": false,
            "ftResult": "",
            "gatewayIp": -10000001,
            "gatewayMACAddress": "00:50:56:00:00:00",
            "host": "DESKTOP-U0QSLQ8",
            "id": "XXXX-XXXX-XXXX-XXXX-YYYY",
            "ip": -10000001,
            "lastSeen": "2020-07-13T11:06:06.632976Z",
            "macAddress": "00:0C:29:BB:74:92",
            "networkAlias": "GCP",
            "networkId": 5866697,
            "networks": [
                {
                    "alias": "GCP",
                    "cidr": "192.1.1.0/24",
                    "gatewayIp": -10000001,
                    "gatewayMACAddress": "00:50:56:00:00:00"
                }
            ],
            "osName": "windows-10.0.17763.1282",
            "osType": 1,
            "policyVersion": "1.0.0",
            "productType": "Work Station",
            "regDate": "2020-07-13T09:46:43.385267Z",
            "status": 0,
            "statusCode": null,
            "statusDescription": null,
            "supportId": null,
            "tags": [
                {
                    "color": "fefb08",
                    "name": "et",
                    "tagId": "XXXX-XXXX-XXXX-XXXX-YYYY"
                }
            ],
            "uniqueHostname": "DESKTOP-U0QSLQ8-xkp"
        }
    }
}

Human Readable Output

Results

agentVersion clientType discoveryId domain edge ftDidRespond ftIsSuccessful ftResult gatewayIp gatewayMACAddress host id ip lastSeen macAddress networkAlias networkId networks osName osType policyVersion productType regDate status statusCode statusDescription supportId tags uniqueHostname
3.200.20.0 0   WORKGROUP true false false   -1062671102 00:50:56:00:00:00 DESKTOP-VM XXXX-XXXX-XXXX-XXXX-YYYY -10000001 2020-07-13T11:06:06.632976Z 00:0C:29:BB:74:92 GCP 5866697 {‘alias’: ‘GCP’, ‘cidr’: ‘192.1.1.0/24’, ‘gatewayIp’: -100000001, ‘gatewayMACAddress’: ‘00:50:56:00:00:00’} windows-10.0.17763.1282 1 1.0.0 Work Station 2020-07-13T09:46:43.385267Z 0       {‘color’: ‘fefb08’, ‘name’: ‘et’, ‘tagId’: ‘XXXX-XXXX-XXXX-XXXX-YYYY’} DESKTOP-VM-xkp

infinipoint-get-tag

get tag

Base Command

infinipoint-get-tag

Input

Argument Name Description Required
name Tag name, e.g. it-department-tag Optional

Context Output

Path Type Description
Infinipoint.Tags.color String Tag color
Infinipoint.Tags.count Number Amount of devices under tag
Infinipoint.Tags.description String Tag description
Infinipoint.Tags.name String Tag name
Infinipoint.Tags.tagId String Infinipoint tag id
Infinipoint.Tags.type Number Tag type

Command Example

!infinipoint-get-tag name=et

Context Example

{
    "Infinipoint": {
        "Tags": {
            "color": "fefb08",
            "count": 1,
            "description": "et",
            "name": "et",
            "tagId": "XXXX-XXXX-XXXX-XXXX-YYYY",
            "type": 0
        }
    }
}

Human Readable Output

Results

color count description name tagId type
fefb08 1 et et 6d0b5156-eb2d-4b28-9c7c-3cb6e80f2cfb 0

infinipoint-get-networks

get networks

Base Command

infinipoint-get-networks

Input

Argument Name Description Required
alias, e.g. office network alias name Optional
cidr cidr, e.g. 10.65.0.1/16 Optional

Context Output

Path Type Description
Infinipoint.Networks.Info.alias String Alias name
Infinipoint.Networks.Info.cidr String Cidr
Infinipoint.Networks.Info.city Unknown City
Infinipoint.Networks.Info.country Unknown Country
Infinipoint.Networks.Info.cronExpression String Cron Expression
Infinipoint.Networks.Info.dnsName String DNS name
Infinipoint.Networks.Info.externalIp Number External ip
Infinipoint.Networks.Info.firstSeen Date Date first seen
Infinipoint.Networks.Info.floor Unknown floor
Infinipoint.Networks.Info.gatewayIp Number gateway IP
Infinipoint.Networks.Info.gatewayMacAddress String gateway MAC Address
Infinipoint.Networks.Info.ip Number IP address
Infinipoint.Networks.Info.ipSubnetMask Number IP subnet mask
Infinipoint.Networks.Info.lastRun Date Last scan Run
Infinipoint.Networks.Info.lastSeen Date Last Seen
Infinipoint.Networks.Info.latitude Unknown Latitude
Infinipoint.Networks.Info.longitude Unknown Longitude
Infinipoint.Networks.Info.managedCount Number managed devices count
Infinipoint.Networks.Info.name String Network name
Infinipoint.Networks.Info.networkId Number Infinipoint network ID
Infinipoint.Networks.Info.nextRun Date Next scan
Infinipoint.Networks.Info.onPrem Number OnPrem
Infinipoint.Networks.Info.room Unknown room
Infinipoint.Networks.Info.scheduleStatus Number infinipoint Schedule Status
Infinipoint.Networks.Info.state Unknown state
Infinipoint.Networks.Info.street Unknown street
Infinipoint.Networks.Info.type Number Type
Infinipoint.Networks.Info.unmanagedCount Number Unmanaged devices count

Command Example

!infinipoint-get-networks alias=GCP

Context Example

{
    "Infinipoint": {
        "Networks": {
            "Info": {
                "alias": "GCP",
                "cidr": "192.0.0.0/24",
                "city": null,
                "country": null,
                "cronExpression": "",
                "dnsName": "",
                "externalIp": 0,
                "firstSeen": "2020-07-13T09:46:43.376984Z",
                "floor": "",
                "gatewayIp": -10000001,
                "gatewayMacAddress": "00:50:56:00:00:00",
                "hidden": false,
                "ip": 0,
                "ipSubnetMask": 0,
                "lastRun": "1970-01-01T00:00:00Z",
                "lastSeen": "2020-08-09T14:13:47.084573Z",
                "latitude": null,
                "longitude": null,
                "managedCount": 3,
                "name": "",
                "networkId": 5866697,
                "nextRun": "1970-01-01T00:00:00Z",
                "onPrem": false,
                "room": "",
                "scheduleStatus": 3,
                "state": null,
                "street": null,
                "type": 0,
                "unmanagedCount": 0
            }
        }
    }
}

Human Readable Output

Results

alias cidr city country cronExpression dnsName externalIp firstSeen floor gatewayIp gatewayMacAddress hidden ip ipSubnetMask lastRun lastSeen latitude longitude managedCount name networkId nextRun onPrem room scheduleStatus state street type unmanagedCount
GCP 192.1.1.0/24         0 2020-07-13T09:46:43.376984Z   -1062671102 00:50:56:F9:90:54 false 0 0 1970-01-01T00:00:00Z 2020-08-09T14:13:47.084573Z     3   5866697 1970-01-01T00:00:00Z false   3     0 0

infinipoint-get-assets-devices

get assets hardware

Base Command

infinipoint-get-assets-devices

Input

Argument Name Description Required
host hostname, e.g. DESKTOP-CIK123 Optional
os_type choose a OS type - 1 = Windows | 2 = Linux | 4 = macOS Optional

Context Output

Path Type Description
Infinipoint.Assets.Hardware.$device String Infinipoint device ID
Infinipoint.Assets.Hardware.$host String hostname
Infinipoint.Assets.Hardware.$time Number Timestamp
Infinipoint.Assets.Hardware.$type String Assets type
Infinipoint.Assets.Hardware.cpu_brand String CPU brand
Infinipoint.Assets.Hardware.cpu_logical_cores String CPU logical cores
Infinipoint.Assets.Hardware.cpu_physical_cores String CPU physical cores
Infinipoint.Assets.Hardware.hardware_model String Hardware model
Infinipoint.Assets.Hardware.hardware_serial String Hardware serial
Infinipoint.Assets.Hardware.hardware_vendor String Hardware vendor
Infinipoint.Assets.Hardware.kernel_version String Kernel version
Infinipoint.Assets.Hardware.os_build String OS build
Infinipoint.Assets.Hardware.os_name String OS name
Infinipoint.Assets.Hardware.os_patch_version String OS patch version
Infinipoint.Assets.Hardware.os_type String infinipint OS type
Infinipoint.Assets.Hardware.os_version String OS version
Infinipoint.Assets.Hardware.physical_memory String Physical memory
Infinipoint.Assets.Hardware.platform String Platform
Infinipoint.Assets.Hardware.user String Last logged in user

Command Example

!infinipoint-get-assets-devices os_type="1"

Context Example

{
    "Infinipoint": {
        "Assets": {
            "Hardware": {
                "$device": "XXXX-XXXX-XXXX-XXXX-YYYY",
                "$host": "DESKTOP-VM",
                "$time": "2020-07-13T11:19:57+00:00",
                "$type": "csv",
                "cpu_brand": "Intel(R) Core(TM) i7-10510U CPU @ 1.80GHz",
                "cpu_logical_cores": "2",
                "cpu_physical_cores": "1",
                "hardware_model": "VMware Virtual Platform",
                "hardware_serial": "VMware-56 4d 8c d8 6d 32 31 e2-ed 43 1f 09 ff bb 74 92",
                "hardware_vendor": "VMware, Inc.",
                "kernel_version": "10.0.17763.1282",
                "os_build": "17763",
                "os_name": "Microsoft Windows 10 Enterprise Evaluation",
                "os_patch_version": "",
                "os_type": "1",
                "os_version": "10.0.17763",
                "physical_memory": "4.0",
                "platform": "windows",
                "user": "tesst2"
            }
        }
    }
}

Human Readable Output

Results

$device $host $time $type cpu_brand cpu_logical_cores cpu_physical_cores hardware_model hardware_serial hardware_vendor kernel_version os_build os_name os_patch_version os_type os_version physical_memory platform user
22ddf738-7e1c-4f20-a9c7-07620d1f2110 DESKTOP-U0QSLQ8 2020-07-13T11:19:57+00:00 csv Intel(R) Core(TM) i7-10510U CPU @ 1.80GHz 2 1 VMware Virtual Platform VMware-56 4d 8c d8 6d 32 31 e2-ed 43 1f 09 ff bb 74 92 VMware, Inc. 10.0.17763.1282 17763 Microsoft Windows 10 Enterprise Evaluation   1 10.0.17763 4.0 windows tesst2

infinipoint-get-assets-cloud

get assets cloud

Base Command

infinipoint-get-assets-cloud

Input

Argument Name Description Required
host hostname Optional
os_type OS Type - 1 = Windows | 2 = Linux | 4 = macOS Optional
source “AWS API” | “GCP API” Optional

Context Output

Path Type Description
Infinipoint.Assets.Cloud.$device String Infinipoint device ID
Infinipoint.Assets.Cloud.$host String Hostname
Infinipoint.Assets.Cloud.$time Number Timestamp
Infinipoint.Assets.Cloud.$type String Assets type
Infinipoint.Assets.Cloud.cloud_scan_timestamp Number cloud scan timestamp
Infinipoint.Assets.Cloud.cpu_brand String CPU brand
Infinipoint.Assets.Cloud.cpu_logical_cores String CPU logical cores
Infinipoint.Assets.Cloud.cpu_physical_cores String CPU physical cores
Infinipoint.Assets.Cloud.creation_time String Creation time
Infinipoint.Assets.Cloud.hardware_model String Hardware model
Infinipoint.Assets.Cloud.hardware_serial String Hardware serial
Infinipoint.Assets.Cloud.hardware_vendor String Hardware vendor
Infinipoint.Assets.Cloud.instance_id Date Instance id
Infinipoint.Assets.Cloud.instance_state String Instance state
Infinipoint.Assets.Cloud.instance_type String Instance type
Infinipoint.Assets.Cloud.os_build String OS build
Infinipoint.Assets.Cloud.os_name String OS name
Infinipoint.Assets.Cloud.os_patch_version String OS patch version
Infinipoint.Assets.Cloud.os_type String OS type
Infinipoint.Assets.Cloud.physical_memory String Physical memory
Infinipoint.Assets.Cloud.platform String Platform
Infinipoint.Assets.Cloud.source String Cloud source
Infinipoint.Assets.Cloud.user String Username
Infinipoint.Assets.Cloud.zone String Zone
Infinipoint.Assets.Cloud.open_ports Number List of open ports

Command Example

!infinipoint-get-assets-cloud source="GCP API"

Context Example

{
    "Infinipoint": {
        "Assets": {
            "Cloud": {
                "$device": "XXXX-XXXX-XXXX-XXXX-YYYY",
                "$host": "ubu-et",
                "$time": "2020-07-13T13:19:37+00:00",
                "$type": "csv",
                "cloud_scan_timestamp": 1594644075,
                "cpu_brand": "Intel(R) Xeon(R) CPU @ 2.30GHz",
                "cpu_logical_cores": "1",
                "cpu_physical_cores": "1",
                "hardware_model": "Google Compute Engine",
                "hardware_serial": "GoogleCloud-46BCBFA9C0E1789A71BA4A36CAD5E7A0",
                "hardware_vendor": "Google",
                "instance_id": "10000000001",
                "kernel_version": "5.4.0-1019-gcp",
                "os_build": "",
                "os_name": "Ubuntu",
                "os_patch_version": "",
                "os_type": "2",
                "os_version": "20.04 LTS (Focal Fossa)",
                "physical_memory": "4.0",
                "platform": "ubuntu",
                "source": "GCP API",
                "user": "et"
            }
        }
    }
}

Human Readable Output

Results

$device $host $time $type cloud_scan_timestamp cpu_brand cpu_logical_cores cpu_physical_cores hardware_model hardware_serial hardware_vendor instance_id kernel_version os_build os_name os_patch_version os_type os_version physical_memory platform source user
a523014f-1612-4b65-90a8-7974b116cb44 ubu-et 2020-07-13T13:19:37+00:00 csv 1594644075 Intel(R) Xeon(R) CPU @ 2.30GHz 1 1 Google Compute Engine GoogleCloud-46BCBFA9C0E1789A71BA4A36CAD5E7A0 Google 7730283300603950466 5.4.0-1019-gcp   Ubuntu   2 20.04 LTS (Focal Fossa) 4.0 ubuntu GCP API eturjeman_riscale_com

infinipoint-get-assets-users

get assets users

Base Command

infinipoint-get-assets-users

Input

Argument Name Description Required
host host name Optional
username user name Optional

Context Output

Path Type Description
Infinipoint.Assets.User.$device String Infinipoint device ID
Infinipoint.Assets.User.$host String hostname
Infinipoint.Assets.User.$time Number Timestamp
Infinipoint.Assets.User.$type String Assets type
Infinipoint.Assets.User.description String Description
Infinipoint.Assets.User.directory String User directory
Infinipoint.Assets.User.username String Username

Command Example

!infinipoint-get-assets-users username="et"

Context Example

{
    "Infinipoint": {
        "Assets": {
            "User": [
                {
                    "$device": "XXXX-XXXX-XXXX-XXXX-YYYY",
                    "$host": "OSX-Machine",
                    "$time": "2020-08-05T07:01:49+00:00",
                    "$type": "csv",
                    "description": "ET",
                    "directory": "/Users/et",
                    "username": "et"
                },
                {
                    "$device": "XXXX-XXXX-XXXX-XXXX-ZZZZ",
                    "$host": "DESKTOP-VM",
                    "$time": "2020-07-13T10:52:41+00:00",
                    "$type": "csv",
                    "description": "",
                    "directory": "",
                    "username": "et"
                },
                {
                    "$device": "XXXX-XXXX-XXXX-XXXX-QQQQ",
                    "$host": "ubu-et",
                    "$time": "2020-07-13T12:42:17+00:00",
                    "$type": "csv",
                    "description": "",
                    "directory": "/home/et",
                    "username": "et"
                }
            ]
        }
    }
}

Human Readable Output

Results

$device $host $time $type description directory username
XXXX-XXXX-XXXX-XXXX-YYYY OSX-Machine 2020-08-05T07:01:49+00:00 csv Setup User /var/setup _mbsetupuser
XXXX-XXXX-XXXX-XXXX-QQQQ DESKTOP-VM 2020-07-13T10:52:41+00:00 csv     et
XXXX-XXXX-XXXX-XXXX-WWWW OSX-VM 2020-08-05T07:01:49+00:00 csv ET /Users/et et
XXXX-XXXX-XXXX-XXXX-EEEE ubu-et 2020-07-13T12:42:17+00:00 csv   /home/et et

infinipoint-get-action-results

get action

Base Command

infinipoint-get-action-results

Input

Argument Name Description Required
action_id, e.g. 9ef2494d-862e-43c8-963c-3587cde75c4d Action id (infinipoint) Required

Context Output

Path Type Description
Infinipoint.Responses.$data String Timestamp
Infinipoint.Responses.$device String Infinipoint device ID
Infinipoint.Responses.$host String Hostname
Infinipoint.Responses.$time Number Expoh time
Infinipoint.Responses.$type String Responses type

Command Example

!infinipoint-get-action-results action_id=8761df7a-05fd-4343-8c7e-794bc6d06940

Human Readable Output

infinipoint-get-queries

get queries

Base Command

infinipoint-get-queries

Input

Argument Name Description Required
name Query name, e.g Windows Logon Session Required

Context Output

Path Type Description
Infinipoint.Scripts.Search.aggregation Number Aggregation included
Infinipoint.Scripts.Search.createdOn Date Date query created on
Infinipoint.Scripts.Search.format Number Query format
Infinipoint.Scripts.Search.id String Infinipoint query id
Infinipoint.Scripts.Search.interp Number interp
Infinipoint.Scripts.Search.module Number Infinipoint module
Infinipoint.Scripts.Search.name String Query name
Infinipoint.Scripts.Search.osType Number OS type

Command Example

!infinipoint-get-queries name=os_version

Context Example

{
    "Infinipoint": {
        "Scripts": {
            "Search": {
                "aggregation": true,
                "createdOn": "2020-02-02T09:28:00.500226Z",
                "description": "Retrieves information FROM the Operative Systems.",
                "format": 2,
                "id": "XXXX-XXXX-XXXX-XXXX-YYYY",
                "interp": 0,
                "module": 4,
                "name": "OS versions",
                "osType": 7
            }
        }
    }
}

Human Readable Output

Results

aggregation createdOn description format id interp module name osType
true 2020-02-02T09:28:00.500226Z Retrieves information FROM the Operative Systems. 2 XXXX-XXXX-XXXX-XXXX-YYYY 0 4 OS versions 7

infinipoint-execute-action

run queries

Base Command

infinipoint-execute-action

Input

Argument Name Description Required
id Query ID, e.g 9b071f4c-da87-409c-9cd1-59a275e52c9d Required
target Target devices ID,e.g [“4f16532e-AAAAA-4b78-BBBB-946d3d3619ca”] Optional

Context Output

Path Type Description
Infinipoint.Scripts.execute.actionId String Action ID
Infinipoint.Scripts.execute.aggColumns String Aggregation columns
Infinipoint.Scripts.execute.devicesCount Number Amount of devices
Infinipoint.Scripts.execute.name String Query name

Command Example

!infinipoint-execute-action id=0b5004ce-0a18-11ea-9a9f-362b9e155667

Context Example

{
    "Infinipoint": {
        "Scripts": {
            "execute": {
                "actionId": "40151026-c5a6-4a3a-92a4-39a0bbee5902",
                "aggColumns": [
                    "Name"
                ],
                "devicesCount": 0,
                "name": "User Profile Not In Use (90 days)"
            }
        }
    }
}

Human Readable Output

Results

actionId aggColumns devicesCount name
40151026-c5a6-4a3a-92a4-39a0bbee5902 Name 0 User Profile Not In Use (90 days)

infinipoint-get-non-compliance

get non compliance devices

Base Command

infinipoint-get-non-compliance

Input

Argument Name Description Required
offset Infinipoint offset - First fetch time Required
limit Limit of responses Required

Context Output

Path Type Description
Infinipoint.Compliance.Incidents.deviceID String Infinipoint device ID
Infinipoint.Compliance.Incidents.eventTime Number Event Time
Infinipoint.Compliance.Incidents.hostname Date hostname
Infinipoint.Compliance.Incidents.issues.issueID String Infinipoint issue ID
Infinipoint.Compliance.Incidents.issues.issueType String Issue Type
Infinipoint.Compliance.Incidents.issues.policyIdx Number Infinipoint policyIdx
Infinipoint.Compliance.Incidents.issues.ref String Infinipoint ref
Infinipoint.Compliance.Incidents.policyID String policy ID
Infinipoint.Compliance.Incidents.policyName String policy name
Infinipoint.Compliance.Incidents.policyVersion Number policy version
Infinipoint.Compliance.Incidents.timestamp Number timestamp

Command Example

!infinipoint-get-non-compliance limit=100 offset=0

Human Readable Output

infinipoint-get-device-details

get device details

Base Command

infinipoint-get-device-details

Input

Argument Name Description Required
discoveryId discovery id, e.g 23eb50e7ceb907975686ba5cebbd3520 Required

Context Output

Path Type Description
Infinipoint.Device.Details.$device String Infinipoint device ID
Infinipoint.Device.Details.$type String Info Type
Infinipoint.Device.Details._key String Infinipoint key
Infinipoint.Device.Details.archive Number Infinipoint archive
Infinipoint.Device.Details.building String building
Infinipoint.Device.Details.classification String classification
Infinipoint.Device.Details.department String department
Infinipoint.Device.Details.email String email
Infinipoint.Device.Details.enroll_date Date enroll date
Infinipoint.Device.Details.first_seen Number first_seen
Infinipoint.Device.Details.hidden Number hidden
Infinipoint.Device.Details.host_name.name String hostname
Infinipoint.Device.Details.host_name.value String Infinipoint value
Infinipoint.Device.Details.jamf_tag String jamf tag
Infinipoint.Device.Details.last_report_date Number last report date
Infinipoint.Device.Details.last_seen Number last seen
Infinipoint.Device.Details.mac_address.name String Infinipoint name
Infinipoint.Device.Details.mac_address.value String Infinipoint value
Infinipoint.Device.Details.model String Infinipoint model
Infinipoint.Device.Details.name_tag String Infinipoint name_tag
Infinipoint.Device.Details.os_name.name String Infinipoint name
Infinipoint.Device.Details.os_name.value String Infinipoint value
Infinipoint.Device.Details.phone_number String phone number
Infinipoint.Device.Details.position String position
Infinipoint.Device.Details.providers String providers
Infinipoint.Device.Details.room String Room
Infinipoint.Device.Details.serial String serial
Infinipoint.Device.Details.site String site
Infinipoint.Device.Details.udid String udid
Infinipoint.Device.Details.unique_id String unique id
Infinipoint.Device.Details.username String User name

Command Example

!infinipoint-get-device-details discoveryId=23eb50e7ceb907975686ba5cebbd3520

Human Readable Output

infinipoint-get-compliance-status

get compliance status

Base Command

infinipoint-get-compliance-status

Input

Argument Name Description Required
device_id device id Required

Context Output

Path Type Description
Infinipoint.Compliance.Device.response.compliance Number compliance statius - 0 - error, 1 - compliance, 2 - non-compliance
Infinipoint.Compliance.Device.success Number success

Command Example

!infinipoint-get-compliance-status device_id=40151026-c5a6-4a3a-92a4-39a0bbee5902

Human Readable Output

Configuration parameters

  • access_key — Access Key (required)
  • private_key — Private Key (required)
  • isFetch — Fetch incidents
  • incident_type — Incident type
  • max_fetch — Maximum number of incidents per fetch
  • first_fetch — First fetch time
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • incidentType — Incident type
  • incidentFetchInterval — Incidents Fetch Interval

Commands (15)

  • infinipoint-execute-action

    Run queries on managed devices.

  • infinipoint-get-action-results

    Get results for a given action ID.

  • infinipoint-get-assets-cloud

    Get managed cloud instances.

  • infinipoint-get-assets-devices

    Get managed devices.

  • infinipoint-get-assets-programs

    Get programs for managed devices and cloud instances.

  • infinipoint-get-assets-users

    Get users for managed devices and cloud instances.

  • infinipoint-get-compliance-status

    Get compliance status of a specific device.

  • infinipoint-get-cve

    Get details of existing CVE.

  • infinipoint-get-device

    Get details for managed device.

  • infinipoint-get-device-details

    Get detailed Information for managed device.

  • infinipoint-get-networks

    Get networks details.

  • infinipoint-get-non-compliance

    Get compliance details by time offset.

  • infinipoint-get-queries

    Get queries details for a givan query name.

  • infinipoint-get-tag

    Get tag details by name.

  • infinipoint-get-vulnerable-devices

    Get vulnerable devices associated with a particular CVE.

Source

Infinipoint.py Infinipoint_test.py Infinipoint.yml Infinipoint_description.md command_examples.txt
Download History Raw 
commonfields:
  id: Infinipoint
  version: -1
name: Infinipoint
display: Infinipoint
category: Network Security
sectionorder:
- Connect
- Collect
provider: Infinipoint
description: Use the Infinipoint integration to retrieve security and policy incompliance events, vulnerabilities or incidents. Investigate and respond to events in real-time.
configuration:
- display: Access Key
  name: access_key
  defaultvalue: ""
  type: 4
  required: true
  section: Connect
- display: Private Key
  name: private_key
  defaultvalue: ""
  type: 4
  required: true
  section: Connect
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
  section: Collect
- display: "Incident type"
  name: incident_type
  defaultvalue: event,alert
  type: 16
  options:
  - event
  - alert
  required: false
  section: Collect
- display: Maximum number of incidents per fetch
  name: max_fetch
  defaultvalue: "10"
  type: 0
  required: false
  section: Collect
- display: First fetch time
  name: first_fetch
  defaultvalue: 3 days
  type: 0
  required: false
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  defaultvalue: "false"
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
- display: Incident type
  name: incidentType
  type: 13
  required: false
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  advanced: true
  section: Collect
script:
  type: python
  commands:
  - name: infinipoint-get-vulnerable-devices
    description: Get vulnerable devices associated with a particular CVE.
    arguments:
    - name: device_os
      description: The device operating system, e.g. Ubutnu, Amazon Linux AMI, CentOS, etc.
    - name: device_risk
      description: Device risk score.
    outputs:
    - contextPath: Infinipoint.Vulnerability.Devices.$device
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Vulnerability.Devices.$host
      description: Hostname.
      type: String
    - contextPath: Infinipoint.Vulnerability.Devices.cve_id
      description: CVE id.
      type: Unknown
    - contextPath: Infinipoint.Vulnerability.Devices.device_risk
      description: Device risk level.
      type: Number
    - contextPath: Infinipoint.Vulnerability.Devices.device_risk_type
      description: Device risk type.
      type: Number
    - contextPath: Infinipoint.Vulnerability.Devices.software_name
      description: Vulnerabilities software name.
      type: Unknown
    - contextPath: Infinipoint.Vulnerability.Devices.vulnerability_count
      description: Vulnerabilities count.
      type: Number
  - name: infinipoint-get-assets-programs
    description: Get programs for managed devices and cloud instances.
    arguments:
    - name: name
      description: Software name, e.g. VMware.
      auto: PREDEFINED
      predefined:
      - Software name
    - name: publisher
      description: Software publisher name, e.g. Microsoft Corporation.
      auto: PREDEFINED
      predefined:
      - Software publisher name
    - name: version
      description: Software version, e.g. 12.0.21005.
      auto: PREDEFINED
      predefined:
      - Software version
    outputs:
    - contextPath: Infinipoint.Assets.Programs.items.$device
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Assets.Programs.items.$host
      description: Hostname.
      type: String
    - contextPath: Infinipoint.Assets.Programs.items.$time
      description: Timestamp.
      type: Number
    - contextPath: Infinipoint.Assets.Programs.items.$type
      description: Assets type.
      type: String
    - contextPath: Infinipoint.Assets.Programs.items.name
      description: Programs name.
      type: String
    - contextPath: Infinipoint.Assets.Programs.items.os_type
      description: OS type - 1 = Windows | 2 = Linux | 4 = macOS.
      type: String
    - contextPath: Infinipoint.Assets.Programs.items.program_exists
      description: Software exists on disk.
      type: String
    - contextPath: Infinipoint.Assets.Programs.items.publisher
      description: Software publisher name.
      type: String
    - contextPath: Infinipoint.Assets.Programs.items.version
      description: Software version.
      type: String
    - contextPath: Infinipoint.Assets.Programs.items.install_update_date
      description: Install update date.
      type: Date
    - contextPath: Infinipoint.Assets.Programs.itemsTotal
      description: Total software.
      type: Number
  - name: infinipoint-get-cve
    description: Get details of existing CVE.
    arguments:
    - name: cve_id
      description: cve id, e.g. CVE-2020-1301.
      required: true
    outputs:
    - contextPath: Infinipoint.Cve.Details.campaign_intelligence.apt
      description: apt.
      type: String
    - contextPath: Infinipoint.Cve.Details.campaign_intelligence.description
      description: CVE description.
      type: String
    - contextPath: Infinipoint.Cve.Details.campaign_intelligence.targeted_countries
      description: CVE targeted countries.
      type: String
    - contextPath: Infinipoint.Cve.Details.campaign_intelligence.targeted_industries
      description: CVE targeted industries.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_description
      description: CVE description.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.ac_insuf_info
      description: ac insuf info.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.access_vector
      description: access vector.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.attack_complexity
      description: attack complexity.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.authentication
      description: authentication.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.availability_impact
      description: availability impact.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.base_score
      description: base score.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.confidentiality_impact
      description: confidentiality impact.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.exploitability_score
      description: exploitability score.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.impact_score
      description: impact score.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.
      description: integrity impact.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.obtain_all_privilege
      description: obtain all privilege.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.obtain_other_privilege
      description: obtain other privilege.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.obtain_user_privilege
      description: obtain user privilege.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.severity
      description: severity.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.user_interaction_required
      description: user interaction required.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v2.vector_string
      description: vector string.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.attack_complexity
      description: attack complexity.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.attack_vector
      description: attack vector.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.availability_impact
      description: availability impact.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.base_score
      description: base score.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.base_severity
      description: base severity.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.confidentiality_impact
      description: confidentiality impact.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.exploitability_score
      description: exploitability score.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.impact_score
      description: impact score.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.integrity_impact
      description: integrity impact.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.privileges_required
      description: privileges required.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.scope
      description: scope.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.user_interaction
      description: user interaction.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.base_metric_v3.vector_string
      description: vector string.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.attack_complexity
      description: attack complexity.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.campaigns
      description: campaigns.
      type: Number
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.device_count
      description: device count.
      type: Number
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.exploitability_risk
      description: exploitability risk.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.exploits
      description: exploits.
      type: Number
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.risk_label
      description: risk label.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.risk_level
      description: risk level.
      type: Number
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.risk_type
      description: risk type.
      type: Number
    - contextPath: Infinipoint.Cve.Details.cve_dynamic_data.infinipoint_base_metric.trends_level
      description: trends level.
      type: String
    - contextPath: Infinipoint.Cve.Details.cve_id
      description: cve id.
      type: String
    - contextPath: Infinipoint.Cve.Details.cwe_description
      description: cwe description.
      type: String
    - contextPath: Infinipoint.Cve.Details.cwe_id
      description: cwe id.
      type: String
    - contextPath: Infinipoint.Cve.Details.devices.$device
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Cve.Details.devices.device_name_string
      description: Device name.
      type: String
    - contextPath: Infinipoint.Cve.Details.devices.device_os
      description: Device OS.
      type: String
    - contextPath: Infinipoint.Cve.Details.devices.device_risk
      description: Device risk.
      type: Number
    - contextPath: Infinipoint.Cve.Details.devices.map_id
      description: Infinipoint map id.
      type: String
    - contextPath: Infinipoint.Cve.Details.devices.vulnerableProduct
      description: Vulnerable product.
      type: String
    - contextPath: Infinipoint.Cve.Details.devices.vulnerableVersion
      description: Vulnerable Version.
      type: String
    - contextPath: Infinipoint.Cve.Details.scan_date
      description: scan date.
      type: Unknown
    - contextPath: Infinipoint.Cve.Details.software_list.cpe_name_string
      description: cpe name string.
      type: String
    - contextPath: Infinipoint.Cve.Details.software_list.cpe_type
      description: cpe type.
      type: String
    - contextPath: Infinipoint.Cve.Details.top_devices.$device
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Cve.Details.top_devices.device_name_string
      description: Device name.
      type: String
    - contextPath: Infinipoint.Cve.Details.top_devices.device_os
      description: Device OS.
      type: String
    - contextPath: Infinipoint.Cve.Details.top_devices.device_risk
      description: Device risk.
      type: Number
    - contextPath: Infinipoint.Cve.Details.top_devices.map_id
      description: Infinipoint map id.
      type: String
    - contextPath: Infinipoint.Cve.Details.top_devices.vulnerableProduct
      description: Vulnerable product.
      type: String
    - contextPath: Infinipoint.Cve.Details.top_devices.vulnerableVersion
      description: Vulnerable version.
      type: String
  - name: infinipoint-get-device
    description: Get details for managed device.
    arguments:
    - name: host
      description: hostname, e.g. DESKTOP-CIK123.
      auto: PREDEFINED
      predefined:
      - Devices hostname
    - name: osType
      auto: PREDEFINED
      predefined:
      - "1"
      - "2"
      - "4"
      description: choose a OS type - 1 = Windows | 2 = Linux | 4 = macOS.
    - name: osName
      description: Device operating system full name e.g. windows-10.0.18363.836.
    - name: status
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Device current status:- 0 = Offline | 1 = Online.
    - name: agentVersion
      description: Infinipoint agent version, e.g. 3.200.10.0.
      auto: PREDEFINED
      predefined:
      - Device Infinipoint’s agent version
    outputs:
    - contextPath: Infinipoint.Devices.agentVersion
      description: Infinipoint agent version.
      type: String
    - contextPath: Infinipoint.Devices.clientType
      description: Client type.
      type: Number
    - contextPath: Infinipoint.Devices.discoveryId
      description: Infinipoint discovery id.
      type: String
    - contextPath: Infinipoint.Devices.domain
      description: Domin name.
      type: String
    - contextPath: Infinipoint.Devices.edge
      description: Infinipoint edge.
      type: Number
    - contextPath: Infinipoint.Devices.ftDidRespond
      description: ftDidRespond.
      type: Number
    - contextPath: Infinipoint.Devices.ftIsSuccessful
      description: ftIsSuccessful.
      type: Number
    - contextPath: Infinipoint.Devices.ftResult
      description: ftResult.
      type: String
    - contextPath: Infinipoint.Devices.gatewayIp
      description: Getway IP.
      type: Number
    - contextPath: Infinipoint.Devices.gatewayMACAddress
      description: Gateway MAC Address.
      type: Date
    - contextPath: Infinipoint.Devices.host
      description: hostname.
      type: String
    - contextPath: Infinipoint.Devices.id
      description: Infinipoint device id.
      type: String
    - contextPath: Infinipoint.Devices.ip
      description: IP address.
      type: Number
    - contextPath: Infinipoint.Devices.lastSeen
      description: Last Seen device.
      type: Date
    - contextPath: Infinipoint.Devices.macAddress
      description: MAC Address.
      type: String
    - contextPath: Infinipoint.Devices.networkId
      description: Infinipoint network ID.
      type: Number
    - contextPath: Infinipoint.Devices.networks.alias
      description: Networks alias.
      type: String
    - contextPath: Infinipoint.Devices.networks.cidr
      description: cidr.
      type: String
    - contextPath: Infinipoint.Devices.networks.gatewayIp
      description: Gateway IP.
      type: Number
    - contextPath: Infinipoint.Devices.networks.gatewayMACAddress
      description: Gateway MACAddress.
      type: Date
    - contextPath: Infinipoint.Devices.osName
      description: OS name.
      type: String
    - contextPath: Infinipoint.Devices.osType
      description: OS Type.
      type: Number
    - contextPath: Infinipoint.Devices.policyVersion
      description: Infinipoint policy version.
      type: String
    - contextPath: Infinipoint.Devices.productType
      description: Product type.
      type: String
    - contextPath: Infinipoint.Devices.regDate
      description: Register date.
      type: Date
    - contextPath: Infinipoint.Devices.status
      description: Infinipoint Device status.
      type: Number
    - contextPath: Infinipoint.Devices.statusCode
      description: Infinipoint status Code.
      type: Unknown
    - contextPath: Infinipoint.Devices.statusDescription
      description: Infinipoint status Description.
      type: Unknown
    - contextPath: Infinipoint.Devices.supportId
      description: Infinipoint support Id.
      type: Unknown
    - contextPath: Infinipoint.Devices.tags.color
      description: Tag color.
      type: String
    - contextPath: Infinipoint.Devices.tags.name
      description: Tag name.
      type: String
    - contextPath: Infinipoint.Devices.tags.tagId
      description: Infinipoint Tag ID.
      type: String
    - contextPath: Infinipoint.Devices.uniqueHostname
      description: Infinipoint unique Hostname.
      type: String
  - name: infinipoint-get-tag
    description: Get tag details by name.
    arguments:
    - name: name
      description: Tag name, e.g. it-department-tag.
    outputs:
    - contextPath: Infinipoint.Tags.color
      description: Tag color.
      type: String
    - contextPath: Infinipoint.Tags.count
      description: Amount of devices under tag.
      type: Number
    - contextPath: Infinipoint.Tags.description
      description: Tag description.
      type: String
    - contextPath: Infinipoint.Tags.name
      description: Tag name.
      type: String
    - contextPath: Infinipoint.Tags.tagId
      description: Infinipoint tag id.
      type: String
    - contextPath: Infinipoint.Tags.type
      description: Tag type.
      type: Number
  - name: infinipoint-get-networks
    description: Get networks details.
    arguments:
    - name: alias, e.g. office
      description: network alias name.
    - name: cidr
      description: cidr, e.g. 10.65.0.1/16.
    outputs:
    - contextPath: Infinipoint.Networks.Info.alias
      description: Alias name.
      type: String
    - contextPath: Infinipoint.Networks.Info.cidr
      description: Cidr.
      type: String
    - contextPath: Infinipoint.Networks.Info.city
      description: City.
      type: Unknown
    - contextPath: Infinipoint.Networks.Info.country
      description: Country.
      type: Unknown
    - contextPath: Infinipoint.Networks.Info.cronExpression
      description: Cron Expression.
      type: String
    - contextPath: Infinipoint.Networks.Info.dnsName
      description: DNS name.
      type: String
    - contextPath: Infinipoint.Networks.Info.externalIp
      description: External ip.
      type: Number
    - contextPath: Infinipoint.Networks.Info.firstSeen
      description: Date first seen.
      type: Date
    - contextPath: Infinipoint.Networks.Info.floor
      description: floor.
      type: Unknown
    - contextPath: Infinipoint.Networks.Info.gatewayIp
      description: gateway IP.
      type: Number
    - contextPath: Infinipoint.Networks.Info.gatewayMacAddress
      description: gateway MAC Address.
      type: String
    - contextPath: Infinipoint.Networks.Info.ip
      description: IP address.
      type: Number
    - contextPath: Infinipoint.Networks.Info.ipSubnetMask
      description: IP subnet mask.
      type: Number
    - contextPath: Infinipoint.Networks.Info.lastRun
      description: Last scan Run.
      type: Date
    - contextPath: Infinipoint.Networks.Info.lastSeen
      description: Last Seen.
      type: Date
    - contextPath: Infinipoint.Networks.Info.latitude
      description: Latitude.
      type: Unknown
    - contextPath: Infinipoint.Networks.Info.longitude
      description: Longitude.
      type: Unknown
    - contextPath: Infinipoint.Networks.Info.managedCount
      description: managed devices count.
      type: Number
    - contextPath: Infinipoint.Networks.Info.name
      description: Network name.
      type: String
    - contextPath: Infinipoint.Networks.Info.networkId
      description: Infinipoint network ID.
      type: Number
    - contextPath: Infinipoint.Networks.Info.nextRun
      description: Next scan.
      type: Date
    - contextPath: Infinipoint.Networks.Info.onPrem
      description: OnPrem.
      type: Number
    - contextPath: Infinipoint.Networks.Info.room
      description: room.
      type: Unknown
    - contextPath: Infinipoint.Networks.Info.scheduleStatus
      description: infinipoint Schedule Status.
      type: Number
    - contextPath: Infinipoint.Networks.Info.state
      description: state.
      type: Unknown
    - contextPath: Infinipoint.Networks.Info.street
      description: street.
      type: Unknown
    - contextPath: Infinipoint.Networks.Info.type
      description: Type.
      type: Number
    - contextPath: Infinipoint.Networks.Info.unmanagedCount
      description: Unmanaged devices count.
      type: Number
  - name: infinipoint-get-assets-devices
    description: Get managed devices.
    arguments:
    - name: $host
      description: hostname, e.g. DESKTOP-CIK123.
    - name: os_type
      auto: PREDEFINED
      predefined:
      - "1"
      - "2"
      - "4"
      description: choose a OS type - 1 = Windows | 2 = Linux | 4 = macOS.
    outputs:
    - contextPath: Infinipoint.Assets.Hardware.$device
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.$host
      description: hostname.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.$time
      description: Timestamp.
      type: Number
    - contextPath: Infinipoint.Assets.Hardware.$type
      description: Assets type.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.cpu_brand
      description: CPU brand.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.cpu_logical_cores
      description: CPU logical cores.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.cpu_physical_cores
      description: CPU physical cores.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.hardware_model
      description: Hardware model.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.hardware_serial
      description: Hardware serial.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.hardware_vendor
      description: Hardware vendor.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.kernel_version
      description: Kernel version.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.os_build
      description: OS build.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.os_name
      description: OS name.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.os_patch_version
      description: OS patch version.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.os_type
      description: infinipint OS type.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.os_version
      description: OS version.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.physical_memory
      description: Physical memory.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.platform
      description: Platform.
      type: String
    - contextPath: Infinipoint.Assets.Hardware.user
      description: Last logged in user.
      type: String
  - name: infinipoint-get-assets-cloud
    description: Get managed cloud instances.
    arguments:
    - name: host
      description: hostname.
    - name: os_type
      description: OS Type - 1 = Windows | 2 = Linux | 4 = macOS.
    - name: source
      auto: PREDEFINED
      predefined:
      - AWS API
      - GCP API
      description: 'AWS API" | "GCP API.'
    outputs:
    - contextPath: Infinipoint.Assets.Cloud.$device
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.$host
      description: Hostname.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.$time
      description: Timestamp.
      type: Number
    - contextPath: Infinipoint.Assets.Cloud.$type
      description: Assets type.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.cloud_scan_timestamp
      description: cloud scan timestamp.
      type: Number
    - contextPath: Infinipoint.Assets.Cloud.cpu_brand
      description: CPU brand.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.cpu_logical_cores
      description: CPU logical cores.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.cpu_physical_cores
      description: CPU physical cores.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.creation_time
      description: Creation time.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.hardware_model
      description: Hardware model.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.hardware_serial
      description: Hardware serial.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.hardware_vendor
      description: Hardware vendor.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.instance_id
      description: Instance id.
      type: Date
    - contextPath: Infinipoint.Assets.Cloud.instance_state
      description: Instance state.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.instance_type
      description: Instance type.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.os_build
      description: OS build.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.os_name
      description: OS name.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.os_patch_version
      description: OS patch version.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.os_type
      description: OS type.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.physical_memory
      description: Physical memory.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.platform
      description: Platform.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.source
      description: Cloud source.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.user
      description: Username.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.zone
      description: Zone.
      type: String
    - contextPath: Infinipoint.Assets.Cloud.open_ports
      description: List of open ports.
      type: Number
  - name: infinipoint-get-assets-users
    description: Get users for managed devices and cloud instances.
    arguments:
    - name: host
      description: host name.
    - name: username
      description: user name.
    outputs:
    - contextPath: Infinipoint.Assets.User.$device
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Assets.User.$host
      description: hostname.
      type: String
    - contextPath: Infinipoint.Assets.User.$time
      description: Timestamp.
      type: Number
    - contextPath: Infinipoint.Assets.User.$type
      description: Assets type.
      type: String
    - contextPath: Infinipoint.Assets.User.description
      description: Description.
      type: String
    - contextPath: Infinipoint.Assets.User.directory
      description: User directory.
      type: String
    - contextPath: Infinipoint.Assets.User.username
      description: Username.
      type: String
  - name: infinipoint-get-action-results
    description: Get results for a given action ID.
    arguments:
    - name: action_id
      description: Action id (infinipoint), e.g. 9ef2494d-862e-43c8-963c-3587cde75c4d.
      required: true
    outputs:
    - contextPath: Infinipoint.Responses.$data
      description: Timestamp.
      type: String
    - contextPath: Infinipoint.Responses.$device
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Responses.$host
      description: Hostname.
      type: String
    - contextPath: Infinipoint.Responses.$time
      description: Expoh time.
      type: Number
    - contextPath: Infinipoint.Responses.$type
      description: Responses type.
      type: String
  - name: infinipoint-get-queries
    description: Get queries details for a givan query name.
    arguments:
    - name: name
      description: Query name, e.g Windows Logon Session.
      required: true
    outputs:
    - contextPath: Infinipoint.Scripts.Search.aggregation
      description: Aggregation included.
      type: Number
    - contextPath: Infinipoint.Scripts.Search.createdOn
      description: Date query created on.
      type: Date
    - contextPath: Infinipoint.Scripts.Search.format
      description: Query format.
      type: Number
    - contextPath: Infinipoint.Scripts.Search.id
      description: Infinipoint query id.
      type: String
    - contextPath: Infinipoint.Scripts.Search.interp
      description: interp.
      type: Number
    - contextPath: Infinipoint.Scripts.Search.module
      description: Infinipoint module.
      type: Number
    - contextPath: Infinipoint.Scripts.Search.name
      description: Query name.
      type: String
    - contextPath: Infinipoint.Scripts.Search.osType
      description: OS type.
      type: Number
  - name: infinipoint-execute-action
    description: Run queries on managed devices.
    arguments:
    - name: id
      description: Query ID, e.g 9b071f4c-da87-409c-9cd1-59a275e52c9d.
      required: true
    - name: target
      description: Target devices ID,e.g ['4f16532e-d41a-4b78-9a5c-946d3d3619ca'].
      isArray: true
    outputs:
    - contextPath: Infinipoint.Scripts.execute.actionId
      description: Action ID.
      type: String
    - contextPath: Infinipoint.Scripts.execute.aggColumns
      description: Aggregation columns.
      type: String
    - contextPath: Infinipoint.Scripts.execute.devicesCount
      description: Amount of devices.
      type: Number
    - contextPath: Infinipoint.Scripts.execute.name
      description: Query name.
      type: String
  - name: infinipoint-get-non-compliance
    description: Get compliance details by time offset.
    arguments:
    - name: offset
      description: Infinipoint offset - First fetch time.
      required: true
    - name: limit
      description: Limit of responses.
      required: true
    outputs:
    - contextPath: Infinipoint.Compliance.Incidents.deviceID
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Compliance.Incidents.eventTime
      description: Event Time.
      type: Number
    - contextPath: Infinipoint.Compliance.Incidents.hostname
      description: hostname.
      type: Date
    - contextPath: Infinipoint.Compliance.Incidents.issues.issueID
      description: Infinipoint issue ID.
      type: String
    - contextPath: Infinipoint.Compliance.Incidents.issues.issueType
      description: Issue Type.
      type: String
    - contextPath: Infinipoint.Compliance.Incidents.issues.policyIdx
      description: Infinipoint policyIdx.
      type: Number
    - contextPath: Infinipoint.Compliance.Incidents.issues.ref
      description: Infinipoint ref.
      type: String
    - contextPath: Infinipoint.Compliance.Incidents.policyID
      description: policy ID.
      type: String
    - contextPath: Infinipoint.Compliance.Incidents.policyName
      description: policy name.
      type: String
    - contextPath: Infinipoint.Compliance.Incidents.policyVersion
      description: policy version.
      type: Number
    - contextPath: Infinipoint.Compliance.Incidents.timestamp
      description: timestamp.
      type: Number
  - name: infinipoint-get-device-details
    description: Get detailed Information for managed device.
    arguments:
    - name: discoveryId
      description: discovery id, e.g 23eb50e7ceb907975686ba5cebbd3520.
      required: true
    outputs:
    - contextPath: Infinipoint.Device.Details.$device
      description: Infinipoint device ID.
      type: String
    - contextPath: Infinipoint.Device.Details.$type
      description: Info Type.
      type: String
    - contextPath: Infinipoint.Device.Details._key
      description: Infinipoint key.
      type: String
    - contextPath: Infinipoint.Device.Details.archive
      description: Infinipoint archive.
      type: Number
    - contextPath: Infinipoint.Device.Details.building
      description: building.
      type: String
    - contextPath: Infinipoint.Device.Details.classification
      description: classification.
      type: String
    - contextPath: Infinipoint.Device.Details.department
      description: department.
      type: String
    - contextPath: Infinipoint.Device.Details.email
      description: email.
      type: String
    - contextPath: Infinipoint.Device.Details.enroll_date
      description: enroll date.
      type: Date
    - contextPath: Infinipoint.Device.Details.first_seen
      description: first_seen.
      type: Number
    - contextPath: Infinipoint.Device.Details.hidden
      description: hidden.
      type: Number
    - contextPath: Infinipoint.Device.Details.host_name.name
      description: hostname.
      type: String
    - contextPath: Infinipoint.Device.Details.host_name.value
      description: Infinipoint value.
      type: String
    - contextPath: Infinipoint.Device.Details.jamf_tag
      description: jamf tag.
      type: String
    - contextPath: Infinipoint.Device.Details.last_report_date
      description: last report date.
      type: Number
    - contextPath: Infinipoint.Device.Details.last_seen
      description: last seen.
      type: Number
    - contextPath: Infinipoint.Device.Details.mac_address.name
      description: Infinipoint name.
      type: String
    - contextPath: Infinipoint.Device.Details.mac_address.value
      description: Infinipoint value.
      type: String
    - contextPath: Infinipoint.Device.Details.model
      description: Infinipoint model.
      type: String
    - contextPath: Infinipoint.Device.Details.name_tag
      description: Infinipoint name_tag.
      type: String
    - contextPath: Infinipoint.Device.Details.os_name.name
      description: Infinipoint name.
      type: String
    - contextPath: Infinipoint.Device.Details.os_name.value
      description: Infinipoint value.
      type: String
    - contextPath: Infinipoint.Device.Details.phone_number
      description: phone number.
      type: String
    - contextPath: Infinipoint.Device.Details.position
      description: position.
      type: String
    - contextPath: Infinipoint.Device.Details.providers
      description: providers.
      type: String
    - contextPath: Infinipoint.Device.Details.room
      description: Room.
      type: String
    - contextPath: Infinipoint.Device.Details.serial
      description: serial.
      type: String
    - contextPath: Infinipoint.Device.Details.site
      description: site.
      type: String
    - contextPath: Infinipoint.Device.Details.udid
      description: udid.
      type: String
    - contextPath: Infinipoint.Device.Details.unique_id
      description: unique id.
      type: String
    - contextPath: Infinipoint.Device.Details.username
      description: User name.
      type: String
  - name: infinipoint-get-compliance-status
    description: Get compliance status of a specific device.
    arguments:
    - name: device_id
      description: device id.
      required: true
    outputs:
    - contextPath: Infinipoint.Compliance.Device.response.compliance
      description: compliance statius - 0 - error | 1 - compliance | 2 - non-compliance.
      type: Number
    - contextPath: Infinipoint.Compliance.Device.success
      description: success.
      type: Number

  dockerimage: demisto/auth-utils:1.0.0.3562326
  isfetch: true
  script: '-'
  subtype: python3
fromversion: 5.0.0
tests:
- No tests (auto formatted)