CheckPointHarmonyEndpoint

Checkpoint Harmony Endpoint provides a complete endpoint security solution built to protect organizations and the remote workforce from today's complex threat landscape.

Category

Endpoint

Pack

CheckPointHarmonyEndpoint

Configuration parameters

• base_url — Base URL (required)
• credentials — Client ID (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (35)

• harmony-ep-agent-computer-repair — Repairs the Harmony Endpoint Client installation on computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-computer-restart — Restarts computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-computer-shutdown — Shuts-down computers match the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-file-copy — Copies the given file from the given source to the given destination on computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-file-delete — Deletes the given file from the given source on computers matching the given query. This operation is risky! Use with caution as it allows you to change Harmony Endpoint protected files or registry entries that are in use by your operating system. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-file-move — Moves the given file from the given source to the given destination on computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-process-information-get — Collects information about processes on computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-process-terminate — Terminates the given process on computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-registry-key-add — Adds a given registry key and/or value to the registry of computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-registry-key-delete — Removes the given registry key or value to the registry of computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-vpn-site-add — Adds the given VPN site's configuration to computers matching the given query. Adding a VPN site allows Harmony Endpoint Clients to connect to it. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-agent-vpn-site-remove — Removes the given VPN site's configuration to computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-anti-malware-restore — Restores a file that was previously quarantined by the Harmony Endpoint Client's anti-malware capability. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-anti-malware-scan — Performs an anti-malware scan on computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-anti-malware-update — Updates the anti-malware Signature Database on computers matching the given query. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-computer-list — Gets a list of computers matching the given filters. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-forensics-file-quarantine — Quarantines files given by path or MD5 or detections relating to a forensic incident. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-forensics-file-restore — Restores previously quarantined files given by path or MD5 or detections relating to a forensic incident. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-forensics-indicator-analyze — Collects forensics data whenever a computer that matches the given query accesses or executes the given IP, URL, filename, MD5 or path. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-ioc-create — Creates new Indicators of Compromise using the given parameters.
• harmony-ep-ioc-delete — Deletes the given Indicators of Compromise by their ID.
• harmony-ep-ioc-list — Gets a list of all Indicators of Compromise. Use the filter parameters to fetch specific IOCs.
• harmony-ep-ioc-update — Updates the given Indicators of Compromise with the given parameters.
• harmony-ep-job-status-get — Retrieves the status and result (if any) of a given asynchronous operation. A job is a way to monitor the progress of an asynchronous operation while avoiding issues that may manifest during long synchronous waits.
• harmony-ep-policy-rule-assignments-add — Assigns the specified entities to the given rule. Specified IDs that are already assigned to the rule are ignored.
• harmony-ep-policy-rule-assignments-get — Gets all entities directly assigned to the given rule.
• harmony-ep-policy-rule-assignments-remove — Removes the specified entities from the given rule's assignments. Specified IDs that are not assigned to the rule are ignored.
• harmony-ep-policy-rule-install — Installs all policies.
• harmony-ep-policy-rule-metadata-list — Gets the metadata of all rules or the given rule's metadata. (Metadata refers to all information relating to the rule except it's actual settings).
• harmony-ep-policy-rule-modifications-get — Gets information on modifications to a given rule. (Modifications are the additions or removal of assignments on a rule since it was last installed).
• harmony-ep-push-operation-abort — Aborts the given remediation operation. Aborting an operation prevents it from being sent to further Harmony Endpoint Clients. Clients that have already received the operation are not affected.
• harmony-ep-push-operation-get — Gets the results of a given Remediation Operation. Remediation Operations may produce results such a Forensics Report or yield status updates such as an anti-malware scan progress.
• harmony-ep-push-operation-status-list — Gets the current statuses of all remediation operations or if a specific ID is specified, retrieve the current status of the given remediation operation.
• harmony-ep-remediation-computer-deisolate — De-Isolates the computers matching the given query. De-isolating a computer restores its access to network resources. Affects only isolated computers. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.
• harmony-ep-remediation-computer-isolate — Isolates the computers matching the given query. Isolation is the act of denying all network access from a given computer. Note that you must specify at least one of the following filter arguments: computer_ids, computer_names, computer_ips, computer_group_names, computer_types, computer_deployment_status, computer_last_connection, or filter.