Endpoint Enrichment - Generic v2 Deprecated Hidden

Deprecated. Use "Endpoint Enrichment - Generic v2.1" playbook instead. Enrich an endpoint by hostname using one or more integrations. Currently, the following integrations are supported: - Active Directory - McAfee ePolicy Orchestrator - Carbon Black Enterprise Response - Cylance Protect - CrowdStrike Falcon Host

Deprecated Content (Deprecated) · 19 tasks · 1 input · 6 outputs

Inputs

  • Hostname — The hostname of the endpoint to enrich.

Outputs

  • Endpoint — The endpoint object of the endpoint that was enriched.
  • Endpoint.Hostname — The hostnames of the endpoints that were enriched.
  • Endpoint.OS — The operating systems running on the endpoints that were enriched.
  • Endpoint.IP — A list of the IP addresses of the endpoints.
  • Endpoint.MAC — A list of the MAC addresses of the endpoints that were enriched.
  • Endpoint.Domain — The domain names of the endpoints that were enriched.

Commands used

cb-sensor-info cylance-protect-get-devices epo-find-system

Flowchart

yes yes yes yes yes yes yes Start Start Endpoint Products Endpoint Products Is McAfee ePolicy Orchestrator enabled? - Exists Is McAfee ePolicy Orchest... Exists Is there an endpoint to enrich? Is there an endpoint to e... Done Done Get host information from ePO - epo-find-system Get host information from... epo-find-system Is Carbon Black Enterprise Response enabled? - Exists Is Carbon Black Enterpris... Exists Get host information from Carbon Black Enterprise Response - cb-sensor-info Get host information from... cb-sensor-info Is CrowdStrike Falcon Host enabled? - Exists Is CrowdStrike Falcon Hos... Exists Is Cylance Protect enabled? - Exists Is Cylance Protect enabled? Exists Get host information from Cylance Protect - cylance-protect-get-devices Get host information from... cylance-protect-get-devices McAfee ePolicy Orchestrator McAfee ePolicy Orchestrator Carbon Black Enterprise Response Carbon Black Enterprise R... Cylance Protect Cylance Protect CrowdStrike Falcon Host CrowdStrike Falcon Host Is Active Directory enabled? Is Active Directory enabled? Get host information from Active Directory - ADGetComputer Get host information from... ADGetComputer Active Directory Active Directory CrowdStrike Endpoint Enrichment - CrowdStrike Endpoint Enrichment CrowdStrike Endpoint Enri... CrowdStrike Endpoint Enrichment