GCenter

This integration allows, via about twenty commands, to interact with the GCenter appliance via its API.

Category

Network Security

Pack

Gatewatcher-AionIQ

Configuration parameters

• ip — GCenter IP address (required)
• version — GCenter Version
• token — GCenter API token
• credentials — GCenter username
• check_cert — Check the TLS certificate

Commands (26)

• gw-add-dga-list-entry — Add dga whitelist/blacklist entry.
• gw-add-ignore-asset-name — Ignore asset name.
• gw-add-ignore-kuser-ip — Ignore kuser IP.
• gw-add-ignore-kuser-name — Ignore kuser name.
• gw-add-ignore-mac-address — Ignore mac address.
• gw-add-malcore-list-entry — Add malcore whitelist/blacklist entry.
• gw-del-dga-list-entry — Delete dga whitelist/blacklist entry.
• gw-del-ignore-asset-name — Delete an ignore asset ID.
• gw-del-ignore-kuser-ip — Delete an ignore kuser IP ID.
• gw-del-ignore-kuser-name — Delete an ignore kuser name ID.
• gw-del-ignore-mac-address — Delete an ignore mac address ID.
• gw-del-malcore-list-entry — Delete malcore whitelist/blacklist entry.
• gw-es-query — Get Elasticsearch data.
• gw-es-wrapper — Get Elasticsearch data using a wrapper.
• gw-get-alert — Get an alert by it's uid.
• gw-get-dga-list-entry — Get the dga whitelist/blacklist.
• gw-get-file-infected — Get a file from an uuid. If there is no uuid, get all the files infected from a time interval.
• gw-get-ignore-asset-name — Get all the ignored asset names.
• gw-get-ignore-kuser-ip — Get all the ignored kuser IP.
• gw-get-ignore-kuser-name — Get all the ignored kuser name.
• gw-get-ignore-mac-address — Get all the ignored mac addresses.
• gw-get-malcore-list-entry — Get the malcore whitelist/blacklist.
• gw-list-alerts — List all alerts (Deprecated. use gw-es-wrapper command instead).
• gw-send-malware — Send malware.
• gw-send-powershell — Send powershell.
• gw-send-shellcode — Send shellcode.