Traps Scan Endpoint Deprecated Hidden

Deprecated. Use CortexXDR instead.

Palo Alto Networks Traps (Deprecated) · 5 tasks · 1 input · 0 outputs

Details

IDTraps Scan Endpoint
From Version5.0.0
Tasks5

README

Initiates an endpoint scan and retrieve the scan results.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • GenericPolling

Integrations

This playbook does not use any integrations.

Scripts

This playbook does not use any scripts.

Commands

  • traps-endpoint-scan
  • traps-endpoint-scan-result

Playbook Inputs

Name Description Required
endpoint_id The ID of the endpoint. Required

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

Traps_Scan_Endpoint

Inputs

  • endpoint_id — The ID of the endpoint.

Commands used

traps-endpoint-scan traps-endpoint-scan-result

Flowchart

Start Start traps-endpoint-scan - traps-endpoint-scan traps-endpoint-scan traps-endpoint-scan GenericPolling - GenericPolling GenericPolling GenericPolling traps-endpoint-scan-result - traps-endpoint-scan-result traps-endpoint-scan-result traps-endpoint-scan-result traps-endpoint-scan-result - traps-endpoint-scan-result traps-endpoint-scan-result traps-endpoint-scan-result

Source

playbook-Traps_Scan_Endpoint.yml
Download History Raw 
id: Traps Scan Endpoint
version: -1
name: Traps Scan Endpoint
hidden: true
deprecated: true
fromversion: "5.0.0"
description: Deprecated. Use CortexXDR instead.
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: f12d335f-9a8b-4c06-8b0e-d9fe3eefd8e1
    type: start
    task:
      id: f12d335f-9a8b-4c06-8b0e-d9fe3eefd8e1
      version: -1
      name: ""
      description: ""
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "1"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 50
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
  "1":
    id: "1"
    taskid: c97a4413-cb98-4672-8157-d440d7f872f2
    type: regular
    task:
      id: c97a4413-cb98-4672-8157-d440d7f872f2
      version: -1
      name: traps-endpoint-scan
      description: Perform a scan operation on the specified endpoint.
      script: '|||traps-endpoint-scan'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "3"
    scriptarguments:
      endpoint_id:
        simple: ${inputs.endpoint_id}
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 195
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
  "2":
    id: "2"
    taskid: be62fa74-f969-499a-87d9-deb6451fbd84
    type: playbook
    task:
      id: be62fa74-f969-499a-87d9-deb6451fbd84
      version: -1
      name: GenericPolling
      description: |-
        Use this playbook as a sub-playbook to block execution of the master playbook until a remote action is complete.
        This playbook implements polling by continuously running the command in Step \#2 until the operation completes.
        The remote action should have the following structure:
        1. Initiate the operation.
        2. Poll to check if the operation completed.
        3. (optional) Get the results of the operation.
      playbookName: GenericPolling
      type: playbook
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "4"
    scriptarguments:
      AdditionalPollingCommandArgNames: {}
      AdditionalPollingCommandArgValues: {}
      Ids:
        simple: ${Traps.ScanResult.OperationID}
      Interval:
        simple: "1"
      PollingCommandArgName:
        simple: operation_id
      PollingCommandName:
        simple: traps-endpoint-scan-result
      Timeout:
        simple: "10"
      dt:
        simple: Traps.ScanResult(val.Status == 'pending' || val.Status == 'in progress').OperationID
    separatecontext: true
    loop:
      iscommand: false
      exitCondition: ""
      wait: 1
    view: |-
      {
        "position": {
          "x": 50,
          "y": 545
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
  "3":
    id: "3"
    taskid: d6e3caa9-e39b-4f37-897b-a8c873f95ff8
    type: regular
    task:
      id: d6e3caa9-e39b-4f37-897b-a8c873f95ff8
      version: -1
      name: traps-endpoint-scan-result
      description: Get results of an endpoint scan operation.
      script: '|||traps-endpoint-scan-result'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "2"
    scriptarguments:
      operation_id:
        simple: ${Traps.Scan.OperationID}
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 370
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
  "4":
    id: "4"
    taskid: d8b4ca86-3e62-4e03-806c-f3e4b4888ec8
    type: regular
    task:
      id: d8b4ca86-3e62-4e03-806c-f3e4b4888ec8
      version: -1
      name: traps-endpoint-scan-result
      description: Get results of an endpoint scan operation.
      script: '|||traps-endpoint-scan-result'
      type: regular
      iscommand: true
      brand: ""
    scriptarguments:
      operation_id:
        simple: ${Traps.Scan.OperationID}
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 720
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
view: |-
  {
    "linkLabelsPosition": {},
    "paper": {
      "dimensions": {
        "height": 765,
        "width": 380,
        "x": 50,
        "y": 50
      }
    }
  }
inputs:
- key: endpoint_id
  value: {}
  required: true
  description: The ID of the endpoint.
outputs: []
tests:
- No test - Is be tested in Traps test playbook