Details

ID	`MobileIronCORE`
Provider	Ivanti
Category	Endpoint
From Version	6.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	Agentix XSIAM

README

MobileIron CORE Integration

This integration was created and tested with version 11.0.0 of MobileIronCORE

This is the default integration for this content pack when configured by the Data Onboarder in Cortex XSIAM.

MobileIron Core - Getting Started

Log in to the MobileIron Core Admin console.
Open the Users top section.
Click on the create local user button. It is recommended to create a new user for the Cortex XSOAR integration specifically and not reuse
an existing one.
Make sure you enter all the details and keep note of the User ID (ex. core-api-user) and the password specifically.
Click on the Admins top section.
Add the user you just created as an admin to the instance.
When setting up the Cortex XSOAR integration use User ID as the username and the password you defined as the MobileIron tenant credentials
Click the Test button and ensure the connection can be established.

Refer to the API documentation at the MobileIron community for more details on setting up the API user.

MobileIron Core - Spaces

If you are dividing the devices into different spaces, it is important to make sure the integration
points to the correct Device Admin Space ID.

In most cases, this is set to the value 1 for the global space ID.

Setting up pre-processing rules

If you are using the fetch incidents option it is advisable to set-up a pre-processing rule in order
to filter out any duplicates that might show up as part of the command.

Inside the Cortex XSOAR admin go to Settings -> Integrations -> Pre-Processing Rules.
In Step 1 add a rule for Type equals MobileIron Core Device Incident.
In Step 2 select Drop and Update.
In Step 3 select Link to oldest incident created within the last 15 days and check the checkbox next to
Search closed incidents.
Add an AND statement and enter MobileIron Device ID of existing incident is identical to the one of the
incoming incident.
Save.

Here is an example image of the rule

Pre-Processing Rules Example

Configure MobileIronCORE on Cortex XSOAR

Navigate to Settings > Integrations > Servers & Services.
Search for MobileIronCORE.

Click Add instance to create and configure a new integration instance.

Parameter	Description	Required
url	Server URL (ex. https://core.mobileiron.com )	True
admin_space_id	Admin Space ID (ex. 1 for the global space ID.)	True
credentials	API User Credentials	True
max_fetch	Maximum number of incidents per fetch	False
incidentType	Incident type	False
insecure	Trust any certificate (not secure)	False
proxy	Use system proxy settings	False
fetch_interval	Fetch Interval (in minutes)	True
isFetch	Fetch incidents	False

Click Test to validate the URLs, token, and connection.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

mobileiron-core-send-message

Sends a message to the particular device based on the device ID.

Base Command

mobileiron-core-send-message

Input

Argument Name	Description	Required
device_id	The ID of the device to send a message to.	Required
subject	The subject of the email.	Required
message	The message of the email.	Required
message_type	The type of message to send. Possible values are: “pns”, “sms” and “email”.	Required

mobileiron-core-update-os

Updates the operating system on the particular device based on the device ID.

Base Command

mobileiron-core-update-os

Input

Argument Name	Description	Required
device_id	The ID of the device on which to update the operating system.	Required

mobileiron-core-unlock-device-only

Unlocks the particular device based on the device ID.

Base Command

mobileiron-core-unlock-device-only

Input

Argument Name	Description	Required
device_id	The ID of the device to unlock.	Required

mobileiron-core-enable-voice-roaming

Enables voice roaming on the particular device based on the device ID.

Base Command

mobileiron-core-enable-voice-roaming

Input

Argument Name	Description	Required
device_id	The ID of the device on which to enable voice roaming.	Required

mobileiron-core-disable-voice-roaming

Disables voice roaming on the particular device based on the device ID.

Base Command

mobileiron-core-disable-voice-roaming

Input

Argument Name	Description	Required
device_id	The ID of the device on which to disable voice roaming.	Required

mobileiron-core-enable-data-roaming

Enables data roaming on the particular device based on the device ID.

Base Command

mobileiron-core-enable-data-roaming

Input

Argument Name	Description	Required
device_id	The ID of the device on which to enable data roaming.	Required

mobileiron-core-disable-data-roaming

Disables data roaming on the particular device based on the device ID.

Base Command

mobileiron-core-disable-data-roaming

Input

Argument Name	Description	Required
device_id	The ID of the device on which to disable data roaming.	Required

mobileiron-core-enable-personal-hotspot

Enables a personal hotspot on the particular device based on the device ID.

Base Command

mobileiron-core-enable-personal-hotspot

Input

Argument Name	Description	Required
device_id	The ID of the device on which to enable a personal hotspot.	Required

mobileiron-core-disable-personal-hotspot

Disables a personal hotspot on the particular device based on the device ID.

Base Command

mobileiron-core-disable-personal-hotspot

Input

Argument Name	Description	Required
device_id	The ID of the device on which to disable a personal hotspot.	Required

mobileiron-core-unlock-app-connect-container

Unlocks an app connect container on the particular device based on the device ID.

Base Command

mobileiron-core-unlock-app-connect-container

Input

Argument Name	Description	Required
device_id	The ID of the device on which to unlock an app connect container.	Required

mobileiron-core-retire-device

Retires a device based on the device ID.

Base Command

mobileiron-core-retire-device

Input

Argument Name	Description	Required
device_id	The ID of the device to retire.	Required

mobileiron-core-wipe-device

Wipes a device based on the device ID.

Base Command

mobileiron-core-wipe-device

Input

Argument Name	Description	Required
device_id	ID of the device to wipe.	Required

mobileiron-core-force-checkin

Forces check in to the device based on the device ID.

Base Command

mobileiron-core-force-checkin

Input

Argument Name	Description	Required
device_id	ID of the device on which to force check in.	Required

mobileiron-core-get-devices-data

Gets a list of devices matching the provided query.

Base Command

mobileiron-core-get-devices-data

Input

Argument Name	Description	Required
query	The query used to filter the list of devices. Default is common.status = “ACTIVE”.	Required
additional_fields	Comma-separated list of fields to query from the API.	Optional
max_fetch	The maximum number of items to return.	Optional

Context Output

Path	Type	Description
MobileIronCore.Device.common_model	String	Model of the device that was fetched.
MobileIronCore.Device.common_os_version	String	Operating system version of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform name of the device that was fetched.
MobileIronCore.Device.common_status	String	Status of the device that was fetched.
MobileIronCore.Device.common_imei	String	International Mobile Equipment Identity (IMEI) of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform of the device that was fetched.
MobileIronCore.Device.common_security_state	String	Security state of the device that was fetched.
MobileIronCore.Device.user_display_name	String	Display name of the device that was fetched.
MobileIronCore.Device.common_last_connected_at	Date	Date the device that was fetched was last connected.
MobileIronCore.Device.common_uuid	String	Device UUID of the device that was fetched.
MobileIronCore.Device.common_quarantined	Boolean	Whether the device was quarantined.
MobileIronCore.Device.common_id	Number	ID of the device that was fetched.
MobileIronCore.Device.common_imsi	String	International mobile subscriber identity (IMSI) of the device that was fetched.
MobileIronCore.Device.common_owner	String	Owner of the device that was fetched.
MobileIronCore.Device.user_email_address	String	User email address of the device that was fetched.
MobileIronCore.Device.common_manufacturer	String	Manufacturer of the device that was fetched.
MobileIronCore.Device.common_compliant	Boolean	Whether the device that was fetched is compliant.
MobileIronCore.Device.user_user_id	String	User ID of the device that was fetched.
MobileIronCore.Device.common_registration_date	Date	Registration date of the device that was fetched.
MobileIronCore.Device.common_wifi_mac_address	String	WiFi MAC address of the device that was fetched.
MobileIronCore.Device.common_noncompliance_reasons	String	Non-compliance reasons for the device that was fetched.
MobileIronCore.Device.ios_iPhone_UDID	String	iPhone UDID of the device that was fetched.
MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0	String	IPhone MAC address EN0 of the device that was fetched.
MobileIronCore.Device.ios_Current_MCC	String	Current MCC of the device that was fetched.
MobileIronCore.Device.common_current_country_code	String	Current country code of the device that was fetched.
MobileIronCore.Device.user_sam_account_name	String	SAM account name of the device that was fetched.
MobileIronCore.Device.common_current_country_name	String	Current country nameCurrent country name of the device that was fetched.
MobileIronCore.Device.common_home_country_name	String	Home country name of the device that was fetched.
MobileIronCore.Device.common_home_country_code	String	Home country code of the device that was fetched.
MobileIronCore.Device.common_device_is_compromised	Boolean	Whether the device that was fetched was compromised.
MobileIronCore.Device.common_SerialNumber	String	Device serial number of the device that was fetched.
MobileIronCore.Device.common_mdm_managed	Boolean	Whether the device that was fetched is MDM managed.

Command Example


#### Context Example

```json
{
    "MobileIronCore": {
        "Device": [
            {
              "common_wifi_mac_address": "",
              "common_noncompliance_reasons": [
                "DEVICE_ADMIN_DEACTIVE"
              ],
              "ios_iPhone_UDID": "",
              "common_device_is_compromised": false,
              "common_SerialNumber": "",
              "common_mdm_managed": false,
              "common_model": "Pixel",
              "common_os_version": "10.0",
              "common_status": "ACTIVE",
              "common_imei": "",
              "common_platform": "Android",
              "common_security_state": "Ok",
              "user_display_name": "*****",
              "common_last_connected_at": "2020-11-09T07:38:22.000Z",
              "common_uuid": "",
              "common_quarantined": false,
              "common_id": 3,
              "common_imsi": "*****",
              "common_owner": "COMPANY",
              "user_email_address": "*****",
              "common_manufacturer": "Google",
              "common_compliant": false,
              "user_user_id": "*****",
              "common_registration_date": "2020-10-29T14:11:39.000Z"
            }
        ]
    }
}

mobileiron-core-get-device-by-uuid

Gets a single device based on the device UUID.

Base Command

mobileiron-core-get-device-by-uuid

Input

Argument Name	Description	Required
device_uuid	The UUID of the device to fetch.	Required
additional_fields	Comma-separated list of fields to query from the API.	Optional

Context Output

Path	Type	Description
MobileIronCore.Device.common_model	String	Model of the device that was fetched.
MobileIronCore.Device.common_os_version	String	Operating system version of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform name of the device that was fetched.
MobileIronCore.Device.common_status	String	Status of the device that was fetched.
MobileIronCore.Device.common_imei	String	International Mobile Equipment Identity (IMEI) of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform of the device that was fetched.
MobileIronCore.Device.common_security_state	String	Security state of the device that was fetched.
MobileIronCore.Device.user_display_name	String	Display name of the device that was fetched.
MobileIronCore.Device.common_last_connected_at	Date	Date the device that was fetched was last connected.
MobileIronCore.Device.common_uuid	String	Device UUID of the device that was fetched.
MobileIronCore.Device.common_quarantined	Boolean	Whether the device was quarantined.
MobileIronCore.Device.common_id	Number	ID of the device that was fetched.
MobileIronCore.Device.common_imsi	String	International mobile subscriber identity (IMSI) of the device that was fetched.
MobileIronCore.Device.common_owner	String	Owner of the device that was fetched.
MobileIronCore.Device.user_email_address	String	User email address of the device that was fetched.
MobileIronCore.Device.common_manufacturer	String	Manufacturer of the device that was fetched.
MobileIronCore.Device.common_compliant	Boolean	Whether the device that was fetched is compliant.
MobileIronCore.Device.user_user_id	String	User ID of the device that was fetched.
MobileIronCore.Device.common_registration_date	Date	Registration date of the device that was fetched.
MobileIronCore.Device.common_wifi_mac_address	String	WiFi MAC address of the device that was fetched.
MobileIronCore.Device.common_noncompliance_reasons	String	Non-compliance reasons for the device that was fetched.
MobileIronCore.Device.ios_iPhone_UDID	String	iPhone UDID of the device that was fetched.
MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0	String	IPhone MAC address EN0 of the device that was fetched.
MobileIronCore.Device.ios_Current_MCC	String	Current MCC of the device that was fetched.
MobileIronCore.Device.common_current_country_code	String	Current country code of the device that was fetched.
MobileIronCore.Device.user_sam_account_name	String	SAM account name of the device that was fetched.
MobileIronCore.Device.common_current_country_name	String	Current country nameCurrent country name of the device that was fetched.
MobileIronCore.Device.common_home_country_name	String	Home country name of the device that was fetched.
MobileIronCore.Device.common_home_country_code	String	Home country code of the device that was fetched.
MobileIronCore.Device.common_device_is_compromised	Boolean	Whether the device that was fetched was compromised.
MobileIronCore.Device.common_SerialNumber	String	Device serial number of the device that was fetched.
MobileIronCore.Device.common_mdm_managed	Boolean	Whether the device that was fetched is MDM managed.

Command Example

!mobileiron-core-get-device-by-uuid device_uuid=9b0da853-9f9b-483c-97ef-f4b5457299cf

Context Example

{
    "MobileIronCore": {
        "Device": {
          "common_wifi_mac_address": "",
          "common_noncompliance_reasons": [
            "DEVICE_ADMIN_DEACTIVE"
          ],
          "ios_iPhone_UDID": "",
          "common_device_is_compromised": false,
          "common_SerialNumber": "",
          "common_mdm_managed": false,
          "common_model": "Pixel",
          "common_os_version": "10.0",
          "common_status": "ACTIVE",
          "common_imei": "",
          "common_platform": "Android",
          "common_security_state": "Ok",
          "user_display_name": "*****",
          "common_last_connected_at": "2020-11-09T07:38:22.000Z",
          "common_uuid": "",
          "common_quarantined": false,
          "common_id": 3,
          "common_imsi": "*****",
          "common_owner": "COMPANY",
          "user_email_address": "*****",
          "common_manufacturer": "Google",
          "common_compliant": false,
          "user_user_id": "*****",
          "common_registration_date": "2020-10-29T14:11:39.000Z"
        }
    }
}

mobileiron-core-get-device-by-serial

Gets a single device based on the device serial number.

Base Command

mobileiron-core-get-device-by-serial

Input

Argument Name	Description	Required
device_serial	The serial number of the device to fetch.	Required
additional_fields	Comma-separated list of fields to query from the API.	Optional

Context Output

Path	Type	Description
MobileIronCore.Device.common_model	String	Model of the device that was fetched.
MobileIronCore.Device.common_os_version	String	Operating system version of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform name of the device that was fetched.
MobileIronCore.Device.common_status	String	Status of the device that was fetched.
MobileIronCore.Device.common_imei	String	International Mobile Equipment Identity (IMEI) of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform of the device that was fetched.
MobileIronCore.Device.common_security_state	String	Security state of the device that was fetched.
MobileIronCore.Device.user_display_name	String	Display name of the device that was fetched.
MobileIronCore.Device.common_last_connected_at	Date	Date the device that was fetched was last connected.
MobileIronCore.Device.common_uuid	String	Device UUID of the device that was fetched.
MobileIronCore.Device.common_quarantined	Boolean	Whether the device was quarantined.
MobileIronCore.Device.common_id	Number	ID of the device that was fetched.
MobileIronCore.Device.common_imsi	String	International mobile subscriber identity (IMSI) of the device that was fetched.
MobileIronCore.Device.common_owner	String	Owner of the device that was fetched.
MobileIronCore.Device.user_email_address	String	User email address of the device that was fetched.
MobileIronCore.Device.common_manufacturer	String	Manufacturer of the device that was fetched.
MobileIronCore.Device.common_compliant	Boolean	Whether the device that was fetched is compliant.
MobileIronCore.Device.user_user_id	String	User ID of the device that was fetched.
MobileIronCore.Device.common_registration_date	Date	Registration date of the device that was fetched.
MobileIronCore.Device.common_wifi_mac_address	String	WiFi MAC address of the device that was fetched.
MobileIronCore.Device.common_noncompliance_reasons	String	Non-compliance reasons for the device that was fetched.
MobileIronCore.Device.ios_iPhone_UDID	String	iPhone UDID of the device that was fetched.
MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0	String	IPhone MAC address EN0 of the device that was fetched.
MobileIronCore.Device.ios_Current_MCC	String	Current MCC of the device that was fetched.
MobileIronCore.Device.common_current_country_code	String	Current country code of the device that was fetched.
MobileIronCore.Device.user_sam_account_name	String	SAM account name of the device that was fetched.
MobileIronCore.Device.common_current_country_name	String	Current country nameCurrent country name of the device that was fetched.
MobileIronCore.Device.common_home_country_name	String	Home country name of the device that was fetched.
MobileIronCore.Device.common_home_country_code	String	Home country code of the device that was fetched.
MobileIronCore.Device.common_device_is_compromised	Boolean	Whether the device that was fetched was compromised.
MobileIronCore.Device.common_SerialNumber	String	Device serial number of the device that was fetched.
MobileIronCore.Device.common_mdm_managed	Boolean	Whether the device that was fetched is MDM managed.

Command Example

!mobileiron-core-get-device-by-serial device_serial=EXAMPLE

Context Example

{
    "MobileIronCore": {
        "Device": {
          "common_wifi_mac_address": "",
          "common_noncompliance_reasons": [
            "DEVICE_ADMIN_DEACTIVE"
          ],
          "ios_iPhone_UDID": "",
          "common_device_is_compromised": false,
          "common_SerialNumber": "",
          "common_mdm_managed": false,
          "common_model": "Pixel",
          "common_os_version": "10.0",
          "common_status": "ACTIVE",
          "common_imei": "",
          "common_platform": "Android",
          "common_security_state": "Ok",
          "user_display_name": "*****",
          "common_last_connected_at": "2020-11-09T07:38:22.000Z",
          "common_uuid": "",
          "common_quarantined": false,
          "common_id": 3,
          "common_imsi": "*****",
          "common_owner": "COMPANY",
          "user_email_address": "*****",
          "common_manufacturer": "Google",
          "common_compliant": false,
          "user_user_id": "*****",
          "common_registration_date": "2020-10-29T14:11:39.000Z"
        }
    }
}

mobileiron-core-get-device-by-mac

Gets a single device based on the device WiFi MAC address.

Base Command

mobileiron-core-get-device-by-mac

Input

Argument Name	Description	Required
device_mac	MAC address of the device to fetch.	Required
additional_fields	Comma-separated list of fields to query from the API.	Optional

Context Output

Path	Type	Description
MobileIronCore.Device.common_model	String	Model of the device that was fetched.
MobileIronCore.Device.common_os_version	String	Operating system version of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform name of the device that was fetched.
MobileIronCore.Device.common_status	String	Status of the device that was fetched.
MobileIronCore.Device.common_imei	String	International Mobile Equipment Identity (IMEI) of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform of the device that was fetched.
MobileIronCore.Device.common_security_state	String	Security state of the device that was fetched.
MobileIronCore.Device.user_display_name	String	Display name of the device that was fetched.
MobileIronCore.Device.common_last_connected_at	Date	Date the device that was fetched was last connected.
MobileIronCore.Device.common_uuid	String	Device UUID of the device that was fetched.
MobileIronCore.Device.common_quarantined	Boolean	Whether the device was quarantined.
MobileIronCore.Device.common_id	Number	ID of the device that was fetched.
MobileIronCore.Device.common_imsi	String	International mobile subscriber identity (IMSI) of the device that was fetched.
MobileIronCore.Device.common_owner	String	Owner of the device that was fetched.
MobileIronCore.Device.user_email_address	String	User email address of the device that was fetched.
MobileIronCore.Device.common_manufacturer	String	Manufacturer of the device that was fetched.
MobileIronCore.Device.common_compliant	Boolean	Whether the device that was fetched is compliant.
MobileIronCore.Device.user_user_id	String	User ID of the device that was fetched.
MobileIronCore.Device.common_registration_date	Date	Registration date of the device that was fetched.
MobileIronCore.Device.common_wifi_mac_address	String	WiFi MAC address of the device that was fetched.
MobileIronCore.Device.common_noncompliance_reasons	String	Non-compliance reasons for the device that was fetched.
MobileIronCore.Device.ios_iPhone_UDID	String	iPhone UDID of the device that was fetched.
MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0	String	IPhone MAC address EN0 of the device that was fetched.
MobileIronCore.Device.ios_Current_MCC	String	Current MCC of the device that was fetched.
MobileIronCore.Device.common_current_country_code	String	Current country code of the device that was fetched.
MobileIronCore.Device.user_sam_account_name	String	SAM account name of the device that was fetched.
MobileIronCore.Device.common_current_country_name	String	Current country nameCurrent country name of the device that was fetched.
MobileIronCore.Device.common_home_country_name	String	Home country name of the device that was fetched.
MobileIronCore.Device.common_home_country_code	String	Home country code of the device that was fetched.
MobileIronCore.Device.common_device_is_compromised	Boolean	Whether the device that was fetched was compromised.
MobileIronCore.Device.common_SerialNumber	String	Device serial number of the device that was fetched.
MobileIronCore.Device.common_mdm_managed	Boolean	Whether the device that was fetched is MDM managed.

Command Example

!mobileiron-core-get-device-by-mac device_mac=EXAMPLE

Context Example

{
    "MobileIronCore": {
        "Device": {
          "common_wifi_mac_address": "",
          "common_noncompliance_reasons": [
            "DEVICE_ADMIN_DEACTIVE"
          ],
          "ios_iPhone_UDID": "",
          "common_device_is_compromised": false,
          "common_SerialNumber": "",
          "common_mdm_managed": false,
          "common_model": "Pixel",
          "common_os_version": "10.0",
          "common_status": "ACTIVE",
          "common_imei": "",
          "common_platform": "Android",
          "common_security_state": "Ok",
          "user_display_name": "*****",
          "common_last_connected_at": "2020-11-09T07:38:22.000Z",
          "common_uuid": "",
          "common_quarantined": false,
          "common_id": 3,
          "common_imsi": "*****",
          "common_owner": "COMPANY",
          "user_email_address": "*****",
          "common_manufacturer": "Google",
          "common_compliant": false,
          "user_user_id": "*****",
          "common_registration_date": "2020-10-29T14:11:39.000Z"
        }
    }
}

mobileiron-core-get-device-by-ip

Gets a single device based on the device IP address.

Base Command

mobileiron-core-get-device-by-ip

Input

Argument Name	Description	Required
device_ip	IP address of the device to fetch.	Required
additional_fields	Comma-separated list of fields to query from the API.	Optional

Context Output

Path	Type	Description
MobileIronCore.Device.common_model	String	Model of the device that was fetched.
MobileIronCore.Device.common_os_version	String	Operating system version of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform name of the device that was fetched.
MobileIronCore.Device.common_status	String	Status of the device that was fetched.
MobileIronCore.Device.common_imei	String	International Mobile Equipment Identity (IMEI) of the device that was fetched.
MobileIronCore.Device.common_platform	String	Platform of the device that was fetched.
MobileIronCore.Device.common_security_state	String	Security state of the device that was fetched.
MobileIronCore.Device.user_display_name	String	Display name of the device that was fetched.
MobileIronCore.Device.common_last_connected_at	Date	Date the device that was fetched was last connected.
MobileIronCore.Device.common_uuid	String	Device UUID of the device that was fetched.
MobileIronCore.Device.common_quarantined	Boolean	Whether the device was quarantined.
MobileIronCore.Device.common_id	Number	ID of the device that was fetched.
MobileIronCore.Device.common_imsi	String	International mobile subscriber identity (IMSI) of the device that was fetched.
MobileIronCore.Device.common_owner	String	Owner of the device that was fetched.
MobileIronCore.Device.user_email_address	String	User email address of the device that was fetched.
MobileIronCore.Device.common_manufacturer	String	Manufacturer of the device that was fetched.
MobileIronCore.Device.common_compliant	Boolean	Whether the device that was fetched is compliant.
MobileIronCore.Device.user_user_id	String	User ID of the device that was fetched.
MobileIronCore.Device.common_registration_date	Date	Registration date of the device that was fetched.
MobileIronCore.Device.common_wifi_mac_address	String	WiFi MAC address of the device that was fetched.
MobileIronCore.Device.common_noncompliance_reasons	String	Non-compliance reasons for the device that was fetched.
MobileIronCore.Device.ios_iPhone_UDID	String	iPhone UDID of the device that was fetched.
MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0	String	IPhone MAC address EN0 of the device that was fetched.
MobileIronCore.Device.ios_Current_MCC	String	Current MCC of the device that was fetched.
MobileIronCore.Device.common_current_country_code	String	Current country code of the device that was fetched.
MobileIronCore.Device.user_sam_account_name	String	SAM account name of the device that was fetched.
MobileIronCore.Device.common_current_country_name	String	Current country nameCurrent country name of the device that was fetched.
MobileIronCore.Device.common_home_country_name	String	Home country name of the device that was fetched.
MobileIronCore.Device.common_home_country_code	String	Home country code of the device that was fetched.
MobileIronCore.Device.common_device_is_compromised	Boolean	Whether the device that was fetched was compromised.
MobileIronCore.Device.common_SerialNumber	String	Device serial number of the device that was fetched.
MobileIronCore.Device.common_mdm_managed	Boolean	Whether the device that was fetched is MDM managed.

Command Example

!mobileiron-core-get-device-by-ip device_id=IP

Context Example

{
    "MobileIronCore": {
        "Device": {
          "common_wifi_mac_address": "",
          "common_noncompliance_reasons": [
            "DEVICE_ADMIN_DEACTIVE"
          ],
          "ios_iPhone_UDID": "",
          "common_device_is_compromised": false,
          "common_SerialNumber": "",
          "common_mdm_managed": false,
          "common_model": "Pixel",
          "common_os_version": "10.0",
          "common_status": "ACTIVE",
          "common_imei": "",
          "common_platform": "Android",
          "common_security_state": "Ok",
          "user_display_name": "*****",
          "common_last_connected_at": "2020-11-09T07:38:22.000Z",
          "common_uuid": "",
          "common_quarantined": false,
          "common_id": 3,
          "common_imsi": "*****",
          "common_owner": "COMPANY",
          "user_email_address": "*****",
          "common_manufacturer": "Google",
          "common_compliant": false,
          "user_user_id": "*****",
          "common_registration_date": "2020-10-29T14:11:39.000Z"
        }
    }
}

Configuration parameters

isFetch — Fetch incidents
incidentType — Incident type
incidentFetchInterval — Incidents Fetch Interval
url — Server URL (i.e., https://core.mobileiron.com ) (required)
admin_space_id — Admin Space ID (i.e., 1 for the global space ID) (required)
credentials — API User Credentials (required)
max_fetch — Maximum number of incidents per fetch
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (18)

mobileiron-core-disable-data-roaming
Disables data roaming on the particular device based on the device ID.
mobileiron-core-disable-personal-hotspot
Disables a personal hotspot on the particular device based on the device ID.
mobileiron-core-disable-voice-roaming
Disables voice roaming on the particular device based on the device ID.
mobileiron-core-enable-data-roaming
Enables data roaming on the particular device based on the device ID.
mobileiron-core-enable-personal-hotspot
Enables a personal hotspot on the particular device based on the device ID.
mobileiron-core-enable-voice-roaming
Enables voice roaming on the particular device based on the device ID.
mobileiron-core-force-checkin
Forces check in to the device based on the device ID.
mobileiron-core-get-device-by-ip
Gets a single device based on the device IP address.
mobileiron-core-get-device-by-mac
Gets a single device based on the device WiFi MAC address.
mobileiron-core-get-device-by-serial
Gets a single device based on the device serial number.
mobileiron-core-get-device-by-uuid
Gets a single device based on the device UUID.
mobileiron-core-get-devices-data
Gets a list of devices matching the provided query.
mobileiron-core-retire-device
Retires a device based on the device ID.
mobileiron-core-send-message
Sends a message to the particular device based on the device ID.
mobileiron-core-unlock-app-connect-container
Unlocks an app connect container on the particular device based on the device ID.
mobileiron-core-unlock-device-only
Unlocks the particular device based on the device ID.
mobileiron-core-update-os
Updates the operating system on the particular device based on the device ID.
mobileiron-core-wipe-device
Wipes a device based on the device ID.

Source

MobileIronCORE.py MobileIronCORE_test.py MobileIronCORE.yml MobileIronCORE_description.md command_examples.txt

Download History Raw

category: Endpoint
sectionorder:
- Connect
- Collect
provider: Ivanti
commonfields:
  id: MobileIronCORE
  version: -1
configuration:
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
  section: Collect
- defaultvalue: MobileIron Core Device Incident
  display: Incident type
  name: incidentType
  type: 13
  required: false
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  advanced: true
  section: Collect
- display: Server URL (i.e., https://core.mobileiron.com )
  name: url
  required: true
  type: 0
  section: Connect
- defaultvalue: '1'
  display: Admin Space ID (i.e., 1 for the global space ID)
  name: admin_space_id
  required: true
  type: 0
  section: Connect
- display: API User Credentials
  name: credentials
  required: true
  type: 9
  section: Connect
- defaultvalue: '50'
  display: Maximum number of incidents per fetch
  name: max_fetch
  type: 0
  required: false
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
description: MobileIron CORE Integration.
display: MobileIronCORE
name: MobileIronCORE
script:
  commands:
  - arguments:
    - description: The ID of the device to send a message to.
      name: device_id
      required: true
    - description: The subject of the email.
      name: subject
      required: true
    - description: The message of the email.
      name: message
      required: true
    - auto: PREDEFINED
      description: 'The type of message to send. Possible values are: "pns", "sms" and "email".'
      name: message_type
      predefined:
      - pns
      - sms
      - email
      required: true
    description: Sends a message to the particular device based on the device ID.
    name: mobileiron-core-send-message
  - arguments:
    - description: The ID of the device on which to update the operating system.
      name: device_id
      required: true
    description: Updates the operating system on the particular device based on the device ID.
    name: mobileiron-core-update-os
  - arguments:
    - description: The ID of the device to unlock.
      name: device_id
      required: true
    description: Unlocks the particular device based on the device ID.
    name: mobileiron-core-unlock-device-only
  - arguments:
    - description: The ID of the device on which to enable voice roaming.
      name: device_id
      required: true
    description: Enables voice roaming on the particular device based on the device ID.
    name: mobileiron-core-enable-voice-roaming
  - arguments:
    - description: The ID of the device on which to disable voice roaming.
      name: device_id
      required: true
    description: Disables voice roaming on the particular device based on the device ID.
    name: mobileiron-core-disable-voice-roaming
  - arguments:
    - description: The ID of the device on which to enable data roaming.
      name: device_id
      required: true
    description: Enables data roaming on the particular device based on the device ID.
    name: mobileiron-core-enable-data-roaming
  - arguments:
    - description: The ID of the device on which to disable data roaming.
      name: device_id
      required: true
    description: Disables data roaming on the particular device based on the device ID.
    name: mobileiron-core-disable-data-roaming
  - arguments:
    - description: The ID of the device on which to enable a personal hotspot.
      name: device_id
      required: true
    description: Enables a personal hotspot on the particular device based on the device ID.
    name: mobileiron-core-enable-personal-hotspot
  - arguments:
    - description: The ID of the device on which to disable a personal hotspot.
      name: device_id
      required: true
    description: Disables a personal hotspot on the particular device based on the device ID.
    name: mobileiron-core-disable-personal-hotspot
  - arguments:
    - description: The ID of the device on which to unlock an app connect container.
      name: device_id
      required: true
    description: Unlocks an app connect container on the particular device based on the device ID.
    name: mobileiron-core-unlock-app-connect-container
  - arguments:
    - description: The ID of the device to retire.
      name: device_id
      required: true
    description: Retires a device based on the device ID.
    name: mobileiron-core-retire-device
  - arguments:
    - description: ID of the device to wipe.
      name: device_id
      required: true
    description: Wipes a device based on the device ID.
    name: mobileiron-core-wipe-device
  - arguments:
    - description: ID of the device on which to force check in.
      name: device_id
      required: true
    description: Forces check in to the device based on the device ID.
    name: mobileiron-core-force-checkin
  - arguments:
    - default: true
      defaultValue: common.status = "ACTIVE"
      description: 'The query used to filter the list of devices. Default is: common.status = "ACTIVE".'
      name: query
      required: true
    - description: Comma-separated list of fields to query from the API.
      name: additional_fields
    - description: The maximum number of items to return.
      name: max_fetch
    description: Gets a list of devices matching the provided query.
    name: mobileiron-core-get-devices-data
    outputs:
    - contextPath: MobileIronCore.Device.common_model
      description: Model of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_os_version
      description: Operating system version of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_status
      description: Status of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_imei
      description: International Mobile Equipment Identity (IMEI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_security_state
      description: Security state of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_display_name
      description: Display name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_last_connected_at
      description: Date the device that was fetched was last connected.
      type: Date
    - contextPath: MobileIronCore.Device.common_uuid
      description: Device UUID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_quarantined
      description: Whether the device was quarantined.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_id
      description: ID of the device that was fetched.
      type: Number
    - contextPath: MobileIronCore.Device.common_imsi
      description: International mobile subscriber identity (IMSI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_owner
      description: Owner of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_email_address
      description: User email address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_manufacturer
      description: Manufacturer of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_compliant
      description: Whether the device that was fetched is compliant.
      type: Boolean
    - contextPath: MobileIronCore.Device.user_user_id
      description: User ID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_registration_date
      description: Registration date of the device that was fetched.
      type: Date
    - contextPath: MobileIronCore.Device.common_wifi_mac_address
      description: WiFi MAC address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_noncompliance_reasons
      description: Non-compliance reasons for the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_UDID
      description: iPhone UDID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0
      description: IPhone MAC address EN0 of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_Current_MCC
      description: Current MCC of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_code
      description: Current country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_sam_account_name
      description: SAM account name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_name
      description: Current country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_name
      description: Home country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_code
      description: Home country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_device_is_compromised
      description: Whether the device that was fetched was compromised.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_SerialNumber
      description: Device serial number of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_mdm_managed
      description: Whether the device that was fetched is MDM managed.
      type: Boolean
  - arguments:
    - description: The UUID of the device to fetch.
      name: device_uuid
      required: true
    - description: Comma-separated list of fields to query from the API.
      name: additional_fields
    description: Gets a single device based on the device UUID.
    name: mobileiron-core-get-device-by-uuid
    outputs:
    - contextPath: MobileIronCore.Device.common_model
      description: Model of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_os_version
      description: Operating system version of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_status
      description: Status of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_imei
      description: International Mobile Equipment Identity (IMEI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_security_state
      description: Security state of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_display_name
      description: Display name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_last_connected_at
      description: Date the device that was fetched was last connected.
      type: Date
    - contextPath: MobileIronCore.Device.common_uuid
      description: Device UUID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_quarantined
      description: Whether the device that was fetched was quarantined.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_id
      description: ID of the device that was fetched.
      type: Number
    - contextPath: MobileIronCore.Device.common_imsi
      description: International mobile subscriber identity (IMSI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_owner
      description: Owner of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_email_address
      description: User email address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_manufacturer
      description: Manufacturer of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_compliant
      description: Whether the device that was fetched was compliant.
      type: Boolean
    - contextPath: MobileIronCore.Device.user_user_id
      description: User ID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_registration_date
      description: Registration date of the device that was fetched.
      type: Date
    - contextPath: MobileIronCore.Device.common_wifi_mac_address
      description: WiFi MAC address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_noncompliance_reasons
      description: Non-compliance reasons for the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_UDID
      description: iPhone UDID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0
      description: IPhone MAC address EN0 of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_Current_MCC
      description: Current MCC of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_code
      description: Current country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_sam_account_name
      description: SAM account name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_name
      description: Current country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_name
      description: Home country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_code
      description: Home country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_device_is_compromised
      description: Whether the device that was fetched was compromised.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_SerialNumber
      description: Device serial number of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_mdm_managed
      description: Whether the device that was fetched is MDM managed.
      type: Boolean
  - arguments:
    - description: The serial number of the device to fetch.
      name: device_serial
      required: true
    - description: Comma-separated list of fields to query from the API.
      name: additional_fields
    description: Gets a single device based on the device serial number.
    name: mobileiron-core-get-device-by-serial
    outputs:
    - contextPath: MobileIronCore.Device.common_model
      description: Model of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_os_version
      description: Operating system version of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_status
      description: Status of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_imei
      description: International Mobile Equipment Identity (IMEI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_security_state
      description: Security state of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_display_name
      description: Display name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_last_connected_at
      description: Date the device that was fetched was last connected.
      type: Date
    - contextPath: MobileIronCore.Device.common_uuid
      description: Device UUID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_quarantined
      description: Whether the device that was fetched was quarantined.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_id
      description: ID of the device that was fetched.
      type: Number
    - contextPath: MobileIronCore.Device.common_imsi
      description: International mobile subscriber identity (IMSI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_owner
      description: Owner of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_email_address
      description: User email address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_manufacturer
      description: Manufacturer of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_compliant
      description: Whether the device that was fetched was compliant.
      type: Boolean
    - contextPath: MobileIronCore.Device.user_user_id
      description: User ID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_registration_date
      description: Registration date of the device that was fetched.
      type: Date
    - contextPath: MobileIronCore.Device.common_wifi_mac_address
      description: WiFi MAC address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_noncompliance_reasons
      description: Non-compliance reasons for the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_UDID
      description: iPhone UDID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0
      description: IPhone MAC address EN0 of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_Current_MCC
      description: Current MCC of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_code
      description: Current country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_sam_account_name
      description: SAM account name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_name
      description: Current country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_name
      description: Home country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_code
      description: Home country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_device_is_compromised
      description: Whether the device that was fetched was compromised.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_SerialNumber
      description: Device serial number of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_mdm_managed
      description: Whether the device that was fetched is MDM managed.
      type: Boolean
  - arguments:
    - description: MAC address of the device to fetch.
      name: device_mac
      required: true
    - description: Comma-separated list of fields to query from the API.
      name: additional_fields
    description: Gets a single device based on the device WiFi MAC address.
    name: mobileiron-core-get-device-by-mac
    outputs:
    - contextPath: MobileIronCore.Device.common_model
      description: Model of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_os_version
      description: Operating system version of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_status
      description: Status of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_imei
      description: International Mobile Equipment Identity (IMEI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_security_state
      description: Security state of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_display_name
      description: Display name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_last_connected_at
      description: Date the device that was fetched was last connected.
      type: Date
    - contextPath: MobileIronCore.Device.common_uuid
      description: Device UUID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_quarantined
      description: Whether the device that was fetched was quarantined.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_id
      description: ID of the device that was fetched.
      type: Number
    - contextPath: MobileIronCore.Device.common_imsi
      description: International mobile subscriber identity (IMSI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_owner
      description: Owner of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_email_address
      description: User email address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_manufacturer
      description: Manufacturer of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_compliant
      description: Whether the device that was fetched was compliant.
      type: Boolean
    - contextPath: MobileIronCore.Device.user_user_id
      description: User ID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_registration_date
      description: Registration date of the device that was fetched.
      type: Date
    - contextPath: MobileIronCore.Device.common_wifi_mac_address
      description: WiFi MAC address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_noncompliance_reasons
      description: Non-compliance reasons for the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_UDID
      description: iPhone UDID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0
      description: IPhone MAC address EN0 of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_Current_MCC
      description: Current MCC of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_code
      description: Current country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_sam_account_name
      description: SAM account name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_name
      description: Current country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_name
      description: Home country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_code
      description: Home country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_device_is_compromised
      description: Whether the device that was fetched was compromised.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_SerialNumber
      description: Device serial number of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_mdm_managed
      description: Whether the device that was fetched is MDM managed.
      type: Boolean
  - arguments:
    - description: IP address of the device to fetch.
      name: device_ip
      required: true
    - description: Comma-separated list of fields to query from the API.
      name: additional_fields
    description: Gets a single device based on the device IP address.
    name: mobileiron-core-get-device-by-ip
    outputs:
    - contextPath: MobileIronCore.Device.common_model
      description: Model of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_os_version
      description: Operating system version of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_status
      description: Status of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_imei
      description: International Mobile Equipment Identity (IMEI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_platform
      description: Platform of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_security_state
      description: Security state of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_display_name
      description: Display name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_last_connected_at
      description: Date the device that was fetched was last connected.
      type: Date
    - contextPath: MobileIronCore.Device.common_uuid
      description: Device UUID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_quarantined
      description: Whether the device that was fetched was quarantined.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_id
      description: ID of the device that was fetched.
      type: Number
    - contextPath: MobileIronCore.Device.common_imsi
      description: International mobile subscriber identity (IMSI) of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_owner
      description: Owner of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_email_address
      description: User email address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_manufacturer
      description: Manufacturer of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_compliant
      description: Whether the device that was fetched was compliant.
      type: Boolean
    - contextPath: MobileIronCore.Device.user_user_id
      description: User ID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_registration_date
      description: Registration date of the device that was fetched.
      type: Date
    - contextPath: MobileIronCore.Device.common_wifi_mac_address
      description: WiFi MAC address of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_noncompliance_reasons
      description: Non-compliance reasons for the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_UDID
      description: iPhone UDID of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_iPhone_MAC_ADDRESS_EN0
      description: IPhone MAC address EN0 of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.ios_Current_MCC
      description: Current MCC of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_code
      description: Current country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.user_sam_account_name
      description: SAM account name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_current_country_name
      description: Current country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_name
      description: Home country name of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_home_country_code
      description: Home country code of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_device_is_compromised
      description: Whether the device that was fetched was compromised.
      type: Boolean
    - contextPath: MobileIronCore.Device.common_SerialNumber
      description: Device serial number of the device that was fetched.
      type: String
    - contextPath: MobileIronCore.Device.common_mdm_managed
      description: Whether the device that was fetched is MDM managed.
      type: Boolean
  dockerimage: demisto/python3:3.12.13.10116658
  isfetch: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests (auto formatted)
defaultmapperin: MobileIron Incident Incoming Mapper
fromversion: 6.0.0