Nexthink

Details

ID	`Nexthink`
Provider	Vista Equity Partners
Category	Utilities
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Supported Modules	Agentix XSIAM

README

Nexthink helps IT teams deliver on the promise of the modern digital workplace. Nexthink is the only solution to provide enterprises with a way to visualize, act and engage across the entire IT ecosystem to lower IT cost and improve digital employee experience.
This integration was integrated and tested with version 1.0.1 of Nexthink

Configure Nexthink in Cortex

Parameter	Description	Required
Engine Host (e.g. connector.nexthink.com)		True
Nexthink Engine Port (e.g. 1671)		False
Username		True
Password		True
Trust any certificate (not secure)	Trust any certificate (not secure).	False
Use system proxy settings	Use system proxy settings.	False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

nt-compliance-check

Verify antivirus/antispyware status.

Base Command

nt-compliance-check

Input

Argument Name	Description	Required
ipaddress	Endpoint IP Address.	Optional
hostname	Endpoint Hostname.	Optional

Context Output

Path	Type	Description
Nexthink.Compliance.DeviceName	string	Endpoint device host name.
Nexthink.Compliance.LastLoggedOnUser	string	Last logged on user.
Nexthink.Compliance.IPAddress	string	Endpoint IP address.
Nexthink.Compliance.MACAddress	string	Endpoint MAC address.
Nexthink.Compliance.DeviceAntivirus	string	Endpoint antivirus name.
Nexthink.Compliance.DeviceAntivirusRTP	string	Endpoint antivirus real time protection status.
Nexthink.Compliance.DeviceAntivirusUpdated	string	Endpoint antivirus update status.
Nexthink.Compliance.DeviceAntispyware	string	Endpoint Antispyware name.
Nexthink.Compliance.DeviceAntispywareRTP	string	Endpoint Antispyware real time protection status.
Nexthink.Compliance.DeviceAntispywareUpdated	string	Endpoint Antispyware update status.

Command Example


#### Human Readable Output

### nt-installed-packages

***
Query installed software in endpoint.

#### Base Command

`nt-installed-packages`

#### Input

| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| hostname | Endpoint Hostname. | Required |
| package | Installed Software Name. Default is agent. | Required |

#### Context Output

| **Path** | **Type** | **Description** |
| --- | --- | --- |
| Nexthink.Package.PackageName | string | Package name. |
| Nexthink.Package.PackagePublisher | string | Packaged publisher. |
| Nexthink.Package.PackageVersion | string | Package version. |
| Nexthink.Package.DeviceName | string | Endpoint device host name. |
| Nexthink.Package.LastLoggedOnUser | string | Last logged on user. |
| Nexthink.Package.IPAddress | string | Endpoint IP address. |
| Nexthink.Package.MACAddress | string | Endpoint MAC address. |

#### Command Example

Human Readable Output

nt-endpoint-details

Get endpoint details.

Base Command

nt-endpoint-details

Input

Argument Name	Description	Required
hostname	Endpoint hostname.	Optional
ipaddress	Endpoint IP Address.	Optional

Context Output

Path	Type	Description
Nexthink.Endpoint.EndpointName	string	Endpoint device host name.
Nexthink.Endpoint.LastLoggedOnUser	string	Last logged on user.
Nexthink.Endpoint.IPAddress	string	Endpoint IP address.
Nexthink.Endpoint.MACAddress	string	Endpoint MAC address.

Command Example

``````

Human Readable Output

Configuration parameters

url — Engine Host (e.g. connector.nexthink.com) (required)
port — Nexthink Engine Port (e.g. 1671)
credentials — Username (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (3)

nt-compliance-check
Verify antivirus/antispyware status.
nt-endpoint-details
Get endpoint details.
nt-installed-packages
Query installed software in endpoint.

Source

Nexthink.py Nexthink.yml Nexthink_description.md

Download History Raw

category: Utilities
provider: Vista Equity Partners
commonfields:
  id: Nexthink
  version: -1
configuration:
- defaultvalue: connector.nexthink.com
  display: Engine Host (e.g. connector.nexthink.com)
  name: url
  required: true
  type: 0
- defaultvalue: '1671'
  display: Nexthink Engine Port (e.g. 1671)
  name: port
  type: 0
  required: false
- display: Username
  name: credentials
  required: true
  type: 9
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
description: Nexthink helps IT teams deliver on the promise of the modern digital workplace. Nexthink is the only solution to provide enterprises with a way to visualize, act and engage across the entire IT ecosystem to lower IT cost and improve digital employee experience.
display: Nexthink
name: Nexthink
script:
  commands:
  - arguments:
    - description: Endpoint IP Address.
      name: ipaddress
    - description: Endpoint Hostname.
      name: hostname
    description: Verify antivirus/antispyware status.
    name: nt-compliance-check
    outputs:
    - contextPath: Nexthink.Compliance.DeviceName
      description: Endpoint device host name.
      type: string
    - contextPath: Nexthink.Compliance.LastLoggedOnUser
      description: Last logged on user.
      type: string
    - contextPath: Nexthink.Compliance.IPAddress
      description: Endpoint IP address.
      type: string
    - contextPath: Nexthink.Compliance.MACAddress
      description: Endpoint MAC address.
      type: string
    - contextPath: Nexthink.Compliance.DeviceAntivirus
      description: Endpoint antivirus name.
      type: string
    - contextPath: Nexthink.Compliance.DeviceAntivirusRTP
      description: Endpoint antivirus real time protection status.
      type: string
    - contextPath: Nexthink.Compliance.DeviceAntivirusUpdated
      description: Endpoint antivirus update status.
      type: string
    - contextPath: Nexthink.Compliance.DeviceAntispyware
      description: Endpoint Antispyware name.
      type: string
    - contextPath: Nexthink.Compliance.DeviceAntispywareRTP
      description: Endpoint Antispyware real time protection status.
      type: string
    - contextPath: Nexthink.Compliance.DeviceAntispywareUpdated
      description: Endpoint Antispyware update status.
      type: string
  - arguments:
    - description: Endpoint Hostname.
      name: hostname
      required: true
    - default: true
      defaultValue: agent
      description: Installed Software Name.
      name: package
      required: true
    description: Query installed software in endpoint.
    name: nt-installed-packages
    outputs:
    - contextPath: Nexthink.Package.PackageName
      description: Package name.
      type: string
    - contextPath: Nexthink.Package.PackagePublisher
      description: Packaged publisher.
      type: string
    - contextPath: Nexthink.Package.PackageVersion
      description: Package version.
      type: string
    - contextPath: Nexthink.Package.DeviceName
      description: Endpoint device host name.
      type: string
    - contextPath: Nexthink.Package.LastLoggedOnUser
      description: Last logged on user.
      type: string
    - contextPath: Nexthink.Package.IPAddress
      description: Endpoint IP address.
      type: string
    - contextPath: Nexthink.Package.MACAddress
      description: Endpoint MAC address.
      type: string
  - arguments:
    - description: Endpoint hostname.
      name: hostname
    - description: Endpoint IP Address.
      name: ipaddress
    description: Get endpoint details.
    name: nt-endpoint-details
    outputs:
    - contextPath: Nexthink.Endpoint.EndpointName
      description: Endpoint device host name.
      type: string
    - contextPath: Nexthink.Endpoint.LastLoggedOnUser
      description: Last logged on user.
      type: string
    - contextPath: Nexthink.Endpoint.IPAddress
      description: Endpoint IP address.
      type: string
    - contextPath: Nexthink.Endpoint.MACAddress
      description: Endpoint MAC address.
      type: string
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No test