IncidentAddSystem

Add a remote system (such as a desktop under investigation) to an investigation (this will allow you to install and agent on the system)

javascript · Common Scripts

Details

ID	`IncidentAddSystem`
Language	javascript
From Version	5.0.0
Tags	management

README

Adds a remote system (such as a desktop under investigation) to an investigation. This allows you to install an agent on the system.

Script Data

Name	Description
Script Type	javascript
Tags	management

Inputs

Argument Name	Description
name	The unique name that will be used in the investigation. (default)
username	The user name in the remote system.
host	The host IP address or network identifiable name. (mandatory)
workgroup	The workgroup or domain of the user.
password	The users password used to log in to the remote system. By default you will be prompted to enter the password once you hit enter. However, the password can be typed in the command line. If the password is entered in the command line, it will be shown.
credentialSet	The credentials to be chosen to apply to the system (instead of username & password).
dmbPort	The non-standard SMB port to be chosen.
sshPort	The non-standard SSH port to be chosen. The default is 22.
os	The OS of the remote system. Can be, “windows”, “linux”, or “OSX”)
arch	Select “amd64” for 64bit systems or “i386” for 32bit systems.
engineName	The engine to be used if required.

Outputs

There are no outputs for this script.

Source

IncidentAddSystem.js IncidentAddSystem.yml

Download History Raw

commonfields:
  id: IncidentAddSystem
  version: -1
name: IncidentAddSystem
script: ''
type: javascript
tags:
- management
comment: |
  Add a remote system (such as a desktop under investigation) to an investigation (this will allow you to install and agent on the system)
system: true
args:
- name: name
  default: true
  description: (default) a unique name that will be used in the investigation e.g.
    when installing an agent.
- name: username
  description: User name in the remote system.
- name: host
  required: true
  description: (mandatory) Host IP address or network identifiable name.
- name: workgroup
  description: Workgroup or domain of the user.
- name: password
  secret: true
  description: User password used to log in to the remote system (by default you will
    be prompted to enter the password once you hit enter, however you can type the
    password in the command line too. If you choose the latter password will be shown).
- name: credentialSet
  description: Choose credentials to apply to system (instead of username & password).
- name: dmbPort
  description: Choose non-standard SMB port (seldom used).
- name: sshPort
  description: Choose non-standard SSH port (default is 22).
- name: os
  description: OS of the remote system (windows/linux/OSX).
- name: arch
  description: Choose amd64 for 64bit systems and i386 for 32bit systems.
- name: engineName
  description: Engine to be used if required.
scripttarget: 0
dependson: {}
timeout: 0s
tests:
- No Test
fromversion: 5.0.0