Details
| ID | MobileIronCLOUD |
|---|---|
| Provider | Ivanti |
| Category | Endpoint |
| From Version | 6.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Supported Modules | Agentix XSIAM |
README
MobileIron CLOUD Integration
MobileIron Cloud - Getting Started
- Log in to the MobileIron Cloud Admin console.
- Open the users section.
- Click the create user button and select the option to create a new API user. It is recommended to create a new user for the Cortex XSOAR integration specifically and not reuse
an existing one. - Fill in all the required details (i.e., use core-api-user as the username) and make sure you enter a strong password.
- When setting up the Cortex XSOAR integration, use the auto-generated email address as the username and the password you
defined as the MobileIron tenant credentials. - Click the
Testbutton and ensure the connection can be established.
Refer to the API documentation at the MobileIron community for more details on setting up the API user.
MobileIron Cloud - Spaces
If you are dividing the devices into different spaces, it is important to make sure the integration
points to the correct Partition ID (Device Space ID).
You should leave this value blank if you are not using spaces or if you want the integration to automatically resolve the
default space ID.
Setting up pre-processing rules
If you are using the fetch incidents option, we recommend to set-up a pre-processing rule in order
to filter out any duplicates that might show up as part of the command.
- In the Cortex XSOAR admin go to Settings -> Integrations -> Pre-Processing Rules
- In Step 1 add a rule for Type equals MobileIron Cloud Device Incident.
- In Step 2 select Drop and Update.
- In Step 3 select Link to oldest incident created within the last 15 days and check the checkbox next to
Search closed incidents . - Add an AND statement and enter MobileIron Device ID of existing incident is identical to the one of the incoming incident.
- Save the rule.
Here is an example image of the rule

Configure MobileIronCLOUD on Cortex XSOAR
- Navigate to Settings > Integrations > Servers & Services.
- Search for MobileIronCLOUD.
-
Click Add instance to create and configure a new integration instance.
Parameter Description Required url Server URL (i.e., https://eu1.mobileiron.com ) True credentials User Name True incidentType Incident type False partition_id Partition ID (leave empty to resolve default) False insecure Trust any certificate (not secure) False proxy Use system proxy settings False fetch_interval Fetch Interval (in minutes) True max_fetch Maximum number of incidents per fetch False isFetch Fetch incidents False - Click Test to validate the URLs, token, and connection.
Commands
You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.
mobileiron-cloud-get-devices-data
Gets all the devices based on a particular filter query. The command might execute multiple API calls depending on the amount of devices that would be returned.
Base Command
mobileiron-cloud-get-devices-data
Input
| Argument Name | Description | Required |
|---|---|---|
| query | Filter query for fetching the device data. Default is registrationState=ACTIVE. | Optional |
| max_fetch | The maximum number of items returned in the list. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| MobileIronCloud.Device.id | Number | ID of the device that is fetched. |
| MobileIronCloud.Device.guid | String | GUID of the device that is fetched. |
| MobileIronCloud.Device.deviceModel | String | Model of the device that is fetched. |
| MobileIronCloud.Device.deviceName | String | Name of the device that is fetched. |
| MobileIronCloud.Device.platformType | String | Platform type of the device that is fetched. |
| MobileIronCloud.Device.platformVersion | String | Platform version of the device that is fetched. |
| MobileIronCloud.Device.osBuildVersion | String | Operating system build version of the device that is fetched. |
| MobileIronCloud.Device.lastCheckin | Date | Last check in time of the device that is fetched. |
| MobileIronCloud.Device.registrationState | String | Registration state of the device that is fetched. |
| MobileIronCloud.Device.displayName | String | Display name of the device that is fetched. |
| MobileIronCloud.Device.firstName | String | First name of the device that is fetched. |
| MobileIronCloud.Device.lastName | String | Last name of the device that is fetched. |
| MobileIronCloud.Device.uid | String | UID of the device that is fetched. |
| MobileIronCloud.Device.emailAddress | String | Email address of the device that is fetched. |
| MobileIronCloud.Device.manufacturer | String | Manufacturer of the device that is fetched. |
| MobileIronCloud.Device.imei | Unknown | International Mobile Equipment Identity (IMEI) of the device that is fetched. |
| MobileIronCloud.Device.imei2 | Unknown | International Mobile Equipment Identity 2 (IME2) of the device that is fetched. |
| MobileIronCloud.Device.imsi | String | International Mobile Subscriber Identity (IMSI) of the device that is fetched. |
| MobileIronCloud.Device.wifiMacAddress | String | WiFi MAC address of the device that is fetched. |
| MobileIronCloud.Device.serialNumber | Unknown | Serial number of the device that is fetched. |
| MobileIronCloud.Device.altSerialNumber | Unknown | Alternative serial number of the device that is fetched. |
| MobileIronCloud.Device.ownershipType | String | Ownership type of the device that is fetched. |
| MobileIronCloud.Device.complianceState | Boolean | Compliance state of the device that is fetched. |
| MobileIronCloud.Device.roaming | Boolean | Roaming status of the device that is fetched. |
| MobileIronCloud.Device.supervised | Unknown | Device supervised. |
| MobileIronCloud.Device.udid | String | UDID of the device that is fetched. |
| MobileIronCloud.Device.policyViolationCount | Number | Policy violation count of the device that is fetched. |
| MobileIronCloud.Device.lastRegistrationTime | Date | Last registration time of the device that is fetched. |
| MobileIronCloud.Device.quarantined | Boolean | Whether the device is quarantined. |
| MobileIronCloud.Device.jailbroken | Boolean | Whether the device is jailbroken. |
Command Example
#### Context Example
```json
{
"MobileIronCloud": {
"Device": [
{
"id": 123,
"guid": "",
"deviceModel": "VirtualBox",
"deviceName": "DESKTOP-B76IV6U",
"platformType": "WINDOWS_PHONE",
"platformVersion": "10.0",
"osBuildVersion": "",
"lastCheckin": 1596026443798,
"registrationState": "ACTIVE",
"displayName": "Windows User",
"firstName": "Windows",
"lastName": "User",
"uid": "userid",
"emailAddress": "email",
"manufacturer": "GmbH",
"imei": null,
"imei2": null,
"imsi": "Not Present",
"wifiMacAddress": "",
"serialNumber": null,
"altSerialNumber": null,
"ownershipType": "UNKNOWN",
"complianceState": false,
"roaming": false,
"supervised": null,
"udid": "UIDVALUE",
"clientLastCheckin": null,
"prettyModel": "VirtualBox",
"policyViolationCount": 1,
"lastRegistrationTime": 1596022502880,
"quarantined": false,
"jailbroken": false,
"windowsDeviceType": "WINDOWS_DESKTOP",
"entityName": "DESKTOP-B76IV6U"
}
]
}
}
mobileiron-cloud-get-device-by-mac
Gets a single device matching the provided mac address.
Base Command
mobileiron-cloud-get-device-by-mac
Input
| Argument Name | Description | Required |
|---|---|---|
| device_mac | THe MAC address of the device to fetch. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| MobileIronCloud.Device.id | Number | The ID of the device that is fetched. |
| MobileIronCloud.Device.guid | String | GUID of the device that is fetched. |
| MobileIronCloud.Device.deviceModel | String | Model of the device that is fetched. |
| MobileIronCloud.Device.deviceName | String | Name of the device that is fetched. |
| MobileIronCloud.Device.platformType | String | Platform type of the device that is fetched. |
| MobileIronCloud.Device.platformVersion | String | Platform version of the device that is fetched. |
| MobileIronCloud.Device.osBuildVersion | String | Operating system build version of the device that is fetched. |
| MobileIronCloud.Device.lastCheckin | Date | Last check in time of the device that is fetched. |
| MobileIronCloud.Device.registrationState | String | Registration state of the device that is fetched. |
| MobileIronCloud.Device.displayName | String | Display name of the device that is fetched. |
| MobileIronCloud.Device.firstName | String | First name of the device that is fetched. |
| MobileIronCloud.Device.lastName | String | Last name of the device that is fetched. |
| MobileIronCloud.Device.uid | String | UID of the device that is fetched. |
| MobileIronCloud.Device.emailAddress | String | Email address of the device that is fetched. |
| MobileIronCloud.Device.manufacturer | String | Manufacturer of the device that is fetched. |
| MobileIronCloud.Device.imei | Unknown | International Mobile Equipment Identity (IMEI) of the device that is fetched. |
| MobileIronCloud.Device.imei2 | Unknown | International Mobile Equipment Identity 2 (IME2) of the device that is fetched. |
| MobileIronCloud.Device.imsi | String | International mobile subscriber identity (IMSI) of the device that is fetched. |
| MobileIronCloud.Device.wifiMacAddress | String | WiFi MAC address of the device that is fetched. |
| MobileIronCloud.Device.serialNumber | Unknown | Serial number of the device that is fetched. |
| MobileIronCloud.Device.altSerialNumber | Unknown | Alternative serial number of the device that is fetched. |
| MobileIronCloud.Device.ownershipType | String | Ownership type of the device that is fetched. |
| MobileIronCloud.Device.complianceState | Boolean | Compliance state of the device that is fetched. |
| MobileIronCloud.Device.roaming | Boolean | Roaming status of the device that is fetched. |
| MobileIronCloud.Device.supervised | Unknown | Device Supervised |
| MobileIronCloud.Device.udid | String | Device UDID of the device that is fetched. |
| MobileIronCloud.Device.policyViolationCount | Number | Policy violation count of the device that is fetched. |
| MobileIronCloud.Device.lastRegistrationTime | Date | Last registration time of the device that is fetched. |
| MobileIronCloud.Device.quarantined | Boolean | Whether the device is quarantined. |
| MobileIronCloud.Device.jailbroken | Boolean | Whether the device is jailbroken. |
Command Example
!mobileiron-cloud-get-device-by-mac device_mac=MAC_HERE
Context Example
{
"MobileIronCloud": {
"Device": {
"id": 123,
"guid": "",
"deviceModel": "VirtualBox",
"deviceName": "DESKTOP-B76IV6U",
"platformType": "WINDOWS_PHONE",
"platformVersion": "10.0",
"osBuildVersion": "",
"lastCheckin": 1596026443798,
"registrationState": "ACTIVE",
"displayName": "Windows User",
"firstName": "Windows",
"lastName": "User",
"uid": "userid",
"emailAddress": "email",
"manufacturer": "GmbH",
"imei": null,
"imei2": null,
"imsi": "Not Present",
"wifiMacAddress": "",
"serialNumber": null,
"altSerialNumber": null,
"ownershipType": "UNKNOWN",
"complianceState": false,
"roaming": false,
"supervised": null,
"udid": "UIDVALUE",
"clientLastCheckin": null,
"prettyModel": "VirtualBox",
"policyViolationCount": 1,
"lastRegistrationTime": 1596022502880,
"quarantined": false,
"jailbroken": false,
"windowsDeviceType": "WINDOWS_DESKTOP",
"entityName": "DESKTOP-B76IV6U"
}
}
}
mobileiron-cloud-get-device-by-serial
Gets a single device matching the provided value for the device serial number.
Base Command
mobileiron-cloud-get-device-by-serial
Input
| Argument Name | Description | Required |
|---|---|---|
| device_serial | Serial number of the device to fetch. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| MobileIronCloud.Device.id | Number | The ID of the device that is fetched. |
| MobileIronCloud.Device.guid | String | GUID of the device that is fetched. |
| MobileIronCloud.Device.deviceModel | String | Model of the device that is fetched. |
| MobileIronCloud.Device.deviceName | String | Name of the device that is fetched. |
| MobileIronCloud.Device.platformType | String | Platform type of the device that is fetched. |
| MobileIronCloud.Device.platformVersion | String | Platform version of the device that is fetched. |
| MobileIronCloud.Device.osBuildVersion | String | Operating system build version of the device that is fetched. |
| MobileIronCloud.Device.lastCheckin | Date | Last check in time of the device that is fetched. |
| MobileIronCloud.Device.registrationState | String | Registration state of the device that is fetched. |
| MobileIronCloud.Device.displayName | String | Display name of the device that is fetched. |
| MobileIronCloud.Device.firstName | String | First name of the device that is fetched. |
| MobileIronCloud.Device.lastName | String | Last name of the device that is fetched. |
| MobileIronCloud.Device.uid | String | UID of the device that is fetched. |
| MobileIronCloud.Device.emailAddress | String | Email address of the device that is fetched. |
| MobileIronCloud.Device.manufacturer | String | Manufacturer of the device that is fetched. |
| MobileIronCloud.Device.imei | Unknown | International Mobile Equipment Identity (IMEI) of the device that is fetched. |
| MobileIronCloud.Device.imei2 | Unknown | International Mobile Equipment Identity 2 (IME2) of the device that is fetched. |
| MobileIronCloud.Device.imsi | String | International mobile subscriber identity (IMSI) of the device that is fetched. |
| MobileIronCloud.Device.wifiMacAddress | String | WiFi MAC address of the device that is fetched. |
| MobileIronCloud.Device.serialNumber | Unknown | Serial number of the device that is fetched. |
| MobileIronCloud.Device.altSerialNumber | Unknown | Alternative serial number of the device that is fetched. |
| MobileIronCloud.Device.ownershipType | String | Ownership type of the device that is fetched. |
| MobileIronCloud.Device.complianceState | Boolean | Compliance state of the device that is fetched. |
| MobileIronCloud.Device.roaming | Boolean | Roaming status of the device that is fetched. |
| MobileIronCloud.Device.supervised | Unknown | Device Supervised |
| MobileIronCloud.Device.udid | String | Device UDID of the device that is fetched. |
| MobileIronCloud.Device.policyViolationCount | Number | Policy violation count of the device that is fetched. |
| MobileIronCloud.Device.lastRegistrationTime | Date | Last registration time of the device that is fetched. |
| MobileIronCloud.Device.quarantined | Boolean | Whether the device is quarantined. |
| MobileIronCloud.Device.jailbroken | Boolean | Whether the device is jailbroken. |
Command Example
!mobileiron-cloud-get-device-by-serial device_serial=SERIAL_HERE
Context Example
{
"MobileIronCloud": {
"Device": {
"id": 123,
"guid": "",
"deviceModel": "VirtualBox",
"deviceName": "DESKTOP-B76IV6U",
"platformType": "WINDOWS_PHONE",
"platformVersion": "10.0",
"osBuildVersion": "",
"lastCheckin": 1596026443798,
"registrationState": "ACTIVE",
"displayName": "Windows User",
"firstName": "Windows",
"lastName": "User",
"uid": "userid",
"emailAddress": "email",
"manufacturer": "GmbH",
"imei": null,
"imei2": null,
"imsi": "Not Present",
"wifiMacAddress": "",
"serialNumber": null,
"altSerialNumber": null,
"ownershipType": "UNKNOWN",
"complianceState": false,
"roaming": false,
"supervised": null,
"udid": "UIDVALUE",
"clientLastCheckin": null,
"prettyModel": "VirtualBox",
"policyViolationCount": 1,
"lastRegistrationTime": 1596022502880,
"quarantined": false,
"jailbroken": false,
"windowsDeviceType": "WINDOWS_DESKTOP",
"entityName": "DESKTOP-B76IV6U"
}
}
}
mobileiron-cloud-unlock-device
Sends an unlock action to the device.
Base Command
mobileiron-cloud-unlock-device
Input
| Argument Name | Description | Required |
|---|---|---|
| device_id | The ID of the MobileIron device to fetch. | Optional |
Command Example
!mobileiron-cloud-unlock-device device_id=1100646
Human Readable Output
Action was performed successfully
mobileiron-cloud-retire-device
Sends a retire action to the device.
Base Command
mobileiron-cloud-retire-device
Input
| Argument Name | Description | Required |
|---|---|---|
| device_id | The ID of the MobileIron device to fetch. | Optional |
Human Readable Output
Action was performed successfully
mobileiron-cloud-wipe-device
Sends a wipe action to the device. This is a potentially destructive action as it will completely wipe the device.
Base Command
mobileiron-cloud-wipe-device
Input
| Argument Name | Description | Required |
|---|---|---|
| device_id | The ID of the MobileIron device to fetch. | Optional |
Human Readable Output
Action was performed successfully
mobileiron-cloud-force-check-in
Forces a check in to the particular device based on the device ID.
Base Command
mobileiron-cloud-force-check-in
Input
| Argument Name | Description | Required |
|---|---|---|
| device_id | The ID of the MobileIron device to fetch. | Optional |
Human Readable Output
Action was performed successfully
mobileiron-cloud-send-message
Sends a message to the device.
Base Command
mobileiron-cloud-send-message
Input
| Argument Name | Description | Required |
|---|---|---|
| device_id | The ID of the MobileIron device to fetch. | Optional |
| message_type | The type of notification to send. Possible values are: email, push. Default is push. | Required |
| subject | The subject of the email. (Only used if an email should be sent). | Optional |
| message | The message to be sent. | Required |
Human Readable Output
Action was performed successfully
mobileiron-cloud-get-device-by-id
Returns the data for a particular device based on the device ID.
Base Command
mobileiron-cloud-get-device-by-id
Input
| Argument Name | Description | Required |
|---|---|---|
| device_id | The ID of the MobileIron device to fetch. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| MobileIronCloud.Device.id | Number | The ID of the device that is fetched. |
| MobileIronCloud.Device.guid | String | GUID of the device that is fetched. |
| MobileIronCloud.Device.deviceModel | String | Model of the device that is fetched. |
| MobileIronCloud.Device.deviceName | String | Name of the device that is fetched. |
| MobileIronCloud.Device.platformType | String | Platform type of the device that is fetched. |
| MobileIronCloud.Device.platformVersion | String | Platform version of the device that is fetched. |
| MobileIronCloud.Device.osBuildVersion | String | Operating system build version of the device that is fetched. |
| MobileIronCloud.Device.lastCheckin | Date | Last check in time of the device that is fetched. |
| MobileIronCloud.Device.registrationState | String | Registration state of the device that is fetched. |
| MobileIronCloud.Device.displayName | String | Display name of the device that is fetched. |
| MobileIronCloud.Device.firstName | String | First name of the device that is fetched. |
| MobileIronCloud.Device.lastName | String | Last name of the device that is fetched. |
| MobileIronCloud.Device.uid | String | UID of the device that is fetched. |
| MobileIronCloud.Device.emailAddress | String | Email address of the device that is fetched. |
| MobileIronCloud.Device.manufacturer | String | Manufacturer of the device that is fetched. |
| MobileIronCloud.Device.imei | Unknown | International Mobile Equipment Identity (IMEI) of the device that is fetched. |
| MobileIronCloud.Device.imei2 | Unknown | International Mobile Equipment Identity 2 (IME2) of the device that is fetched. |
| MobileIronCloud.Device.imsi | String | International mobile subscriber identity (IMSI) of the device that is fetched. |
| MobileIronCloud.Device.wifiMacAddress | String | WiFi MAC address of the device that is fetched. |
| MobileIronCloud.Device.serialNumber | Unknown | Serial number of the device that is fetched. |
| MobileIronCloud.Device.altSerialNumber | Unknown | Alternative serial number of the device that is fetched. |
| MobileIronCloud.Device.ownershipType | String | Ownership type of the device that is fetched. |
| MobileIronCloud.Device.complianceState | Boolean | Compliance state of the device that is fetched. |
| MobileIronCloud.Device.roaming | Boolean | Roaming status of the device that is fetched. |
| MobileIronCloud.Device.supervised | Unknown | Device Supervised |
| MobileIronCloud.Device.udid | String | Device UDID of the device that is fetched. |
| MobileIronCloud.Device.policyViolationCount | Number | Policy violation count of the device that is fetched. |
| MobileIronCloud.Device.lastRegistrationTime | Date | Last registration time of the device that is fetched. |
| MobileIronCloud.Device.quarantined | Boolean | Whether the device is quarantined. |
| MobileIronCloud.Device.jailbroken | Boolean | Whether the device is jailbroken. |
Command Example
!mobileiron-cloud-get-device-by-id device_id=1100646
Context Example
{
"MobileIronCloud": {
"Device": {
"id": 123,
"guid": "",
"deviceModel": "VirtualBox",
"deviceName": "DESKTOP-B76IV6U",
"platformType": "WINDOWS_PHONE",
"platformVersion": "10.0",
"osBuildVersion": "",
"lastCheckin": 1596026443798,
"registrationState": "ACTIVE",
"displayName": "Windows User",
"firstName": "Windows",
"lastName": "User",
"uid": "userid",
"emailAddress": "email",
"manufacturer": "GmbH",
"imei": null,
"imei2": null,
"imsi": "Not Present",
"wifiMacAddress": "",
"serialNumber": null,
"altSerialNumber": null,
"ownershipType": "UNKNOWN",
"complianceState": false,
"roaming": false,
"supervised": null,
"udid": "UIDVALUE",
"clientLastCheckin": null,
"prettyModel": "VirtualBox",
"policyViolationCount": 1,
"lastRegistrationTime": 1596022502880,
"quarantined": false,
"jailbroken": false,
"windowsDeviceType": "WINDOWS_DESKTOP",
"entityName": "DESKTOP-B76IV6U"
}
}
}
Configuration parameters
isFetch— Fetch incidentsincidentType— Incident typeincidentFetchInterval— Incidents Fetch Intervalurl— Server URL (i.e., https://eu1.mobileiron.com ) (required)credentials— User Name (required)partition_id— Partition ID (leave empty to resolve default)max_fetch— Maximum number of incidents per fetchinsecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (9)
-
mobileiron-cloud-force-check-inForces a check in to the particular device based on the device ID.
-
mobileiron-cloud-get-device-by-idReturns the data for a particular device based on the device id.
-
mobileiron-cloud-get-device-by-macGets a single device matching the provided MAC address.
-
mobileiron-cloud-get-device-by-serialGets a single device matching the provided value for the device serial number.
-
mobileiron-cloud-get-devices-dataGets all the devices based on a particular filter query. The command might execute multiple API calls depending on the amount of devices that are returned.
-
mobileiron-cloud-retire-deviceSends a retire action to the device.
-
mobileiron-cloud-send-messageSends a message to the device.
-
mobileiron-cloud-unlock-deviceSends an unlock action to the device.
-
mobileiron-cloud-wipe-deviceSends a wipe action to the device. This is a potentially destructive action as it will completely wipe the device.
category: Endpoint sectionorder: - Connect - Collect provider: Ivanti commonfields: id: MobileIronCLOUD version: -1 configuration: - display: Fetch incidents name: isFetch type: 8 required: false section: Collect - defaultvalue: MobileIron Cloud Device Incident display: Incident type name: incidentType type: 13 required: false section: Collect - display: Incidents Fetch Interval name: incidentFetchInterval defaultvalue: '1' required: false type: 19 advanced: true section: Collect - display: Server URL (i.e., https://eu1.mobileiron.com ) name: url required: true type: 0 section: Connect - display: User Name name: credentials required: true type: 9 section: Connect - additionalinfo: Leave empty to automatically fetch the default partition ID for the configured tenant. display: Partition ID (leave empty to resolve default) name: partition_id type: 0 required: false section: Connect - defaultvalue: '50' display: Maximum number of incidents per fetch name: max_fetch type: 0 required: false section: Collect - display: Trust any certificate (not secure) name: insecure type: 8 required: false section: Connect - display: Use system proxy settings name: proxy type: 8 required: false section: Connect description: MobileIron Cloud Integration. display: MobileIronCLOUD name: MobileIronCLOUD script: commands: - arguments: - defaultValue: registrationState=ACTIVE description: Filter query for fetching the device data. Default is "registrationState=ACTIVE". name: query - description: The maximum number of items returned in the list. name: max_fetch description: Gets all the devices based on a particular filter query. The command might execute multiple API calls depending on the amount of devices that are returned. name: mobileiron-cloud-get-devices-data outputs: - contextPath: MobileIronCloud.Device.id description: ID of the device that is fetched. type: Number - contextPath: MobileIronCloud.Device.guid description: GUID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.deviceModel description: Model of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.deviceName description: Name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.platformType description: Platform type of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.platformVersion description: Platform version of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.osBuildVersion description: Operating system build version of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.lastCheckin description: Last check in time of the device that is fetched. type: Date - contextPath: MobileIronCloud.Device.registrationState description: Registration state of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.displayName description: Display name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.firstName description: First name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.lastName description: Last name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.uid description: UID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.emailAddress description: Email address of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.manufacturer description: Manufacturer of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.imei description: International Mobile Equipment Identity (IMEI) of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.imei2 description: International Mobile Equipment Identity 2 (IMEI2) of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.imsi description: International mobile subscriber identity (IMSI) of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.wifiMacAddress description: WiFi MAC address of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.serialNumber description: Serial number of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.altSerialNumber description: Alternative serial number of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.ownershipType description: Ownership type of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.complianceState description: Compliance state of the device that is fetched. type: Boolean - contextPath: MobileIronCloud.Device.roaming description: Roaming status of the device that is fetched. type: Boolean - contextPath: MobileIronCloud.Device.supervised description: Device supervised. type: Unknown - contextPath: MobileIronCloud.Device.udid description: UDID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.policyViolationCount description: Policy violation count of the device that is fetched. type: Number - contextPath: MobileIronCloud.Device.lastRegistrationTime description: Last registration time of the device that is fetched. type: Date - contextPath: MobileIronCloud.Device.quarantined description: Whether the device is quarantined. type: Boolean - contextPath: MobileIronCloud.Device.jailbroken description: Whether the device is jailbroken. type: Boolean - arguments: - description: THe MAC address of the device to fetch. name: device_mac required: true description: Gets a single device matching the provided MAC address. name: mobileiron-cloud-get-device-by-mac outputs: - contextPath: MobileIronCloud.Device.id description: The ID of the device that is fetched. type: Number - contextPath: MobileIronCloud.Device.guid description: GUID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.deviceModel description: Model of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.deviceName description: Name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.platformType description: Platform type of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.platformVersion description: Platform version of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.osBuildVersion description: Operating system build version of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.lastCheckin description: Last check in time of the device that is fetched. type: Date - contextPath: MobileIronCloud.Device.registrationState description: Registration state of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.displayName description: Display name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.firstName description: First name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.lastName description: Last name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.uid description: UID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.emailAddress description: Email address of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.manufacturer description: Manufacturer of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.imei description: International Mobile Equipment Identity (IMEI) of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.imei2 description: International Mobile Equipment Identity2 (IME2) of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.imsi description: International mobile subscriber identity (IMSI) of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.wifiMacAddress description: WiFi MAC address of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.serialNumber description: Serial number of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.altSerialNumber description: Alternative serial number of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.ownershipType description: Ownership type of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.complianceState description: Compliance state of the device that is fetched. type: Boolean - contextPath: MobileIronCloud.Device.roaming description: Roaming status of the device that is fetched. type: Boolean - contextPath: MobileIronCloud.Device.supervised description: Device supervised. type: Unknown - contextPath: MobileIronCloud.Device.udid description: UDID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.policyViolationCount description: Policy violation count of the device that is fetched. type: Number - contextPath: MobileIronCloud.Device.lastRegistrationTime description: Last registration time of the device that is fetched. type: Date - contextPath: MobileIronCloud.Device.quarantined description: Whether the device is quarantined. type: Boolean - contextPath: MobileIronCloud.Device.jailbroken description: Whether the device is jailbroken. type: Boolean - arguments: - description: Serial number of the device to fetch. name: device_serial description: Gets a single device matching the provided value for the device serial number. name: mobileiron-cloud-get-device-by-serial outputs: - contextPath: MobileIronCloud.Device.id description: The ID of the device that is fetched. type: Number - contextPath: MobileIronCloud.Device.guid description: GUID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.deviceModel description: Model of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.deviceName description: Name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.platformType description: Platform type of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.platformVersion description: Platform version of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.osBuildVersion description: Operating system build version of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.lastCheckin description: Last check in time of the device that is fetched. type: Date - contextPath: MobileIronCloud.Device.registrationState description: Registration state of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.displayName description: Display name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.firstName description: First name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.lastName description: Last name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.uid description: UID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.emailAddress description: Email address of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.manufacturer description: Manufacturer of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.imei description: International Mobile Equipment Identity (IMEI) of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.imei2 description: International Mobile Equipment Identity 2 (IME2) of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.imsi description: International mobile subscriber identity (IMSI) of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.wifiMacAddress description: WiFi MAC address of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.serialNumber description: Serial number of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.altSerialNumber description: Alternative serial number of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.ownershipType description: Ownership type of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.complianceState description: Compliance state of the device that is fetched. type: Boolean - contextPath: MobileIronCloud.Device.roaming description: Roaming status of the device that is fetched. type: Boolean - contextPath: MobileIronCloud.Device.supervised description: Device supervised. type: Unknown - contextPath: MobileIronCloud.Device.udid description: UDID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.policyViolationCount description: Policy violation count of the device that is fetched. type: Number - contextPath: MobileIronCloud.Device.lastRegistrationTime description: Last registration time of the device that is fetched. type: Date - contextPath: MobileIronCloud.Device.quarantined description: Whether the device is quarantined. type: Boolean - contextPath: MobileIronCloud.Device.jailbroken description: Whether the device is jailbroken. type: Boolean - arguments: - description: The ID of the MobileIron device to fetch. name: device_id description: Sends an unlock action to the device. name: mobileiron-cloud-unlock-device - arguments: - description: The ID of the MobileIron device to fetch. name: device_id description: Sends a retire action to the device. name: mobileiron-cloud-retire-device - arguments: - description: The ID of the MobileIron device to fetch. name: device_id description: Sends a wipe action to the device. This is a potentially destructive action as it will completely wipe the device. name: mobileiron-cloud-wipe-device - arguments: - description: The ID of the MobileIron device to fetch. name: device_id description: Forces a check in to the particular device based on the device ID. name: mobileiron-cloud-force-check-in - arguments: - description: The ID of the MobileIron device to fetch. name: device_id - auto: PREDEFINED defaultValue: push description: 'The type of notification to send. Possible values are: "email" and "push". Default is "push".' name: message_type predefined: - email - push required: true - description: The subject of the email. (Only used if an email should be sent.) name: subject - description: The message to be sent. name: message required: true description: Sends a message to the device. name: mobileiron-cloud-send-message - arguments: - description: The ID of the MobileIron device to fetch. name: device_id required: true description: Returns the data for a particular device based on the device id. name: mobileiron-cloud-get-device-by-id outputs: - contextPath: MobileIronCloud.Device.id description: The ID of the device that is fetched. type: Number - contextPath: MobileIronCloud.Device.guid description: GUID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.deviceModel description: Model of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.deviceName description: Name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.platformType description: Platform type of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.platformVersion description: Platform version of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.osBuildVersion description: Operating system build version of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.lastCheckin description: Last check in time of the device that is fetched. type: Date - contextPath: MobileIronCloud.Device.registrationState description: Registration state of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.displayName description: Display name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.firstName description: First name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.lastName description: Last name of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.uid description: UID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.emailAddress description: Email address of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.manufacturer description: Manufacturer of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.imei description: International Mobile Equipment Identity (IMEI) of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.imei2 description: International Mobile Equipment Identity 2 (IME2) of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.imsi description: International mobile subscriber identity (IMSI) of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.wifiMacAddress description: WiFi MAC address of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.serialNumber description: Serial number of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.altSerialNumber description: Alternative serial number of the device that is fetched. type: Unknown - contextPath: MobileIronCloud.Device.ownershipType description: Ownership type of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.complianceState description: Compliance state of the device that is fetched. type: Boolean - contextPath: MobileIronCloud.Device.roaming description: Roaming status of the device that is fetched. type: Boolean - contextPath: MobileIronCloud.Device.supervised description: Device supervised. type: Unknown - contextPath: MobileIronCloud.Device.udid description: UDID of the device that is fetched. type: String - contextPath: MobileIronCloud.Device.policyViolationCount description: Policy violation count of the device that is fetched. type: Number - contextPath: MobileIronCloud.Device.lastRegistrationTime description: Last registration time of the device that is fetched. type: Date - contextPath: MobileIronCloud.Device.quarantined description: Whether the device is quarantined. type: Boolean - contextPath: MobileIronCloud.Device.jailbroken description: Whether the device is jailbroken. type: Boolean dockerimage: demisto/python3:3.12.13.10116658 isfetch: true runonce: false script: '-' subtype: python3 type: python tests: - No tests (auto formatted) defaultmapperin: MobileIron Incident Incoming Mapper fromversion: 6.0.0