TaniumFilterComputersByIndexQueryFileDetails

Details

ID	`TaniumFilterComputersByIndexQueryFileDetails`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.10.6.33415`
Tags	tanium

README

Gets the requested sensors from all of the machines where the index query file details match the given filter.
For example, !TaniumFilterQuestionByIndexQueryFileDetails sensors="Computer Name" filter_type=contains filter_value=Demisto limit=5
will be translated to the following plain text Tanium question:
“Get Computer Name from all machines with any Index Query File Details[,, ,, ,, *, 5] containing “Demisto””.

Script Data

Name	Description
Script Type	python
Tags	tanium

Dependencies

This script uses the following commands and scripts.

tn-ask-manual-question

Inputs

Argument Name	Description
directoryPath	The glob of the directory’s name used for searching. For example, “Windows”.
fileName	The glob of the file’s name used for searching. For example, “*exe”.
fileSize	The glob of the file’s size used for searching. For example, “10??”.
fileMD5Hash	The glob of the file’s MD5 hash used for searching. For example, “1c7b*”.
fileSHA1Hash	The glob of the file’s SHA1 hash used for searching. For example, “1c7b*”.
fileSHA256Hash	The gob of the file’s SHA256 hash used for searching. For example, “1c7b*”.
magicNumber	The glob of a magic number used for searching. For example, “4D54*”.
limit	The maximum number of rows to return.
filter_type	The type of filter to apply to the question results.
filter_value	The value to filter the results by.
sensors	The semicolon separated list of columns to return. For example, “Computer Name;IP Address”.

Outputs

Path	Description	Type
Tanium.QuestionResults.Computer Name	The computer name that contains the index query file details as specified by the filters.	Unknown
Tanium.QuestionResults.Count	The number or results per computer name that match the filter.	Unknown

Source

TaniumFilterComputersByIndexQueryFileDetails.py TaniumFilterComputersByIndexQueryFileDetails.yml

Download History Raw

commonfields:
  id: TaniumFilterComputersByIndexQueryFileDetails
  version: -1
name: TaniumFilterComputersByIndexQueryFileDetails
script: ''
type: python
subtype: python3
tags:
- tanium
comment: "Deprecated. Use tn-ask-question instead."
enabled: true
args:
- name: directoryPath
  description: Glob of directory name used for searching,e.g. Windows
- name: fileName
  description: Glob of file name used for searching, e.g. *exe
- name: fileSize
  description: Glob of file size used for searching, e.g.10??
- name: fileMD5Hash
  description: Glob of file MD5 hash used for searching, e.g. 1c7b*
- name: fileSHA1Hash
  description: Glob of file SHA1 hash used for searching, e.g. 1c7b*
- name: fileSHA256Hash
  description: Glob of file SHA256 hash used for searching, e.g. 1c7b*
- name: magicNumber
  description: Glob of a magic number used for searching, 4D54*
- name: limit
  description: Maximum number of rows to return
- name: filter_type
  required: true
  auto: PREDEFINED
  predefined:
  - less
  - notless
  - greater
  - notgreater
  - equal
  - notequal
  - contains
  - notcontains
  - startswith
  - endswith
  - notstartswith
  - doesnotendwith
  - regex
  - notregex
  description: Type of filter to apply to the question results
- name: filter_value
  required: true
  description: Value to filter results by
- name: sensors
  description: Semicolon separated list of columns to return. E.g. "Computer Name;IP Address"
  defaultValue: Computer Name
outputs:
- contextPath: Tanium.QuestionResults.Computer Name
  description: Computer Name that contains the index query file details as specified by the filters
- contextPath: Tanium.QuestionResults.Count
  description: Number or results per computer name that match the filter
scripttarget: 0
dependson:
  must:
  - tn-ask-manual-question
fromversion: 5.0.0
dockerimage: demisto/python3:3.10.6.33415
tests:
- No tests (auto formatted)
deprecated: true