OSQueryOpenSockets Deprecated

Deprecated. Use OSQueryBasicQuery with query='select distinct pid, family, protocol, local_address, local_port, remote_address, remote_port, path from process_open_sockets where path `<>` '' or remote_address `<>` '';' instead.

python · OS Query

Details

ID	`OSQueryOpenSockets`
Language	python
From Version	6.0.0
Docker Image	`demisto/python:2.7.18.24398`
Tags	OSQuery

README

Deprecated. Use OSQueryBasicQuery with query='select distinct pid, family, protocol, local_address, local_port, remote_address, remote_port, path from process_open_sockets where path \<\> '' or remote_address \<\> '';' instead.

Script Data

Name	Description
Script Type	python2
Tags	OSQuery
Cortex XSOAR Version	5.0.0

Dependencies

This script uses the following commands and scripts.

OSQueryBasicQuery

Inputs

Argument Name	Description
system	The System to remote execute on, can be a list of systems

Outputs

There are no outputs for this script.

Source

OSQueryOpenSockets.py OSQueryOpenSockets.yml

Download History Raw

commonfields:
  id: OSQueryOpenSockets
  version: -1
name: OSQueryOpenSockets
script: ''
type: python
subtype: python2
tags:
- OSQuery
deprecated: true
comment: "Deprecated. Use OSQueryBasicQuery with query='select distinct pid, family, protocol, local_address, local_port, remote_address, remote_port, path from process_open_sockets where path `<>` '' or remote_address `<>` '';' instead."
system: true
args:
- name: system
  required: true
  default: true
  description: The System to remote execute on, can be a list of systems
scripttarget: 0
dependson:
  must:
  - OSQueryBasicQuery
timeout: 0s
fromversion: 6.0.0
dockerimage: demisto/python:2.7.18.24398
tests:
- No tests (auto formatted)