Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
Airlock Digital app icon

Airlock Digital

This app provides investigative, containment, and management actions for Airlock Digital's Execution Control & Allow listing endpoint product

soar product badge

Compatibility
Not Available
Platform Version: 6.4, 6.3, 6.2, 6.1, 6.0, 5.5, 5.4, 5.3
Rating

0

(0)

Log in to rate this app
This app provides investigative, containment, and management actions for Airlock Digital's Execution Control & Allow listing endpoint product

Supported Actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • unblock hash: Unblock (remove) hashes from one or more Blocklist policies
  • disallow hash: Disallow (remove) hashes from one or more Application Captures
  • list identifiers: Gathers a list of identifiers which are required for referencing groups, applications, baselines, or blocklists in other actions
  • list policy: List the policy configuration of a specified group
  • move endpoint: Moves an endpoint from one group to another
  • allow hash: Allow (add) hashes in an Application Capture policy
  • block hash: Block (add) hashes in a Blocklist policy
  • list endpoints: List all the registered agents
  • revoke otp: Revoke the One Time Password
  • retrieve otp: Retrieve the One Time Password
  • lookup hash: Lookup SHA256 hash

Categories

Created By

SOAR Community

Type

connector

Downloads

728

Resources

Login to report this app listing
OSZAR »