Welcome to the new Splunkbase! To return to the old Splunkbase, .
Airlock Digital app icon

Airlock Digital

This app provides investigative, containment, and management actions for Airlock Digital's Execution Control & Allow listing endpoint product

soar product badge

Latest Version 1.0.0
September 17, 2021
Compatibility
Not Available
Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9, 4.8
Rating

0

(0)

Log in to rate this app
Support
Airlock Digital support icon
Not Supported
Ranking

#2

in Endpoint
This app provides investigative, containment, and management actions for Airlock Digital's Execution Control & Allow listing endpoint product

Supported Actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • unblock hash: Unblock (remove) hashes from one or more Blocklist policies
  • disallow hash: Disallow (remove) hashes from one or more Application Captures
  • list identifiers: Gathers a list of identifiers which are required for referencing groups, applications, baselines, or blocklists in other actions
  • list policy: List the policy configuration of a specified group
  • move endpoint: Moves an endpoint from one group to another
  • allow hash: Allow (add) hashes in an Application Capture policy
  • block hash: Block (add) hashes in a Blocklist policy
  • list endpoints: List all the registered agents
  • revoke otp: Revoke the One Time Password
  • retrieve otp: Retrieve the One Time Password
  • lookup hash: Lookup SHA256 hash

Categories

Created By

srv-stage-community

Source Code

Type

connector

Licensing

Splunk Answers

Resources

Log in to report this app listing