agent interface capability

The specific command or capability that is done over the Agent to Agent interface.

Creation
Properties
Casts

Version	Platforms
9.5.5.193	Windows
9.5.7.90	Mac

Creation

capability <string> of <agent interface> : agent interface capability

Returns the name and the state of a specific capability of a specific agent interface.

Q: capability "quarantine" of agent interface "EDR" of client
A: quarantine:Off

Plural: capabilities

Version	Platforms
9.5.5.193	Windows
9.5.7.90	Mac

permalink source

capability of <agent interface> : agent interface capability

Returns the name and the state of the capability supported by the agent interface. This is an example that uses plural:

Q: capabilities of agent interface "EDR" of client
A: quarantine:Off
A: delete registry value
A: kill process
A: quarantine file
A: update registry value

The state is not returned by stateless remediation capabilities.

Plural: capabilities

Version	Platforms
9.5.5.193	Windows
9.5.7.90	Mac

permalink source

Properties

error code of <agent interface capability> : integer

If available, returns the last result from the capability specified. For example:

Q: error code of capability "quarantine" of agent interface "EDR" of client
A: 0

where "quarantine" is one of the capabilities of the EDR angent.

Plural: error codes

Version	Platforms
9.5.5.199	Windows
9.5.7.90	Mac

permalink source

name of <agent interface capability> : string

Returns the name of a specific capability of a specific agent interface. For example:

Q: name of capability "kill process" of agent interface "EDR" of client
A: kill process

The plural returns the names of the capabilities for a specific agent interface:

Q: names of capabilities of agent interface "EDR" of client
A: quarantine
A: delete registry value
A: kill process
A: quarantine file
A: update registry value

Plural: names

Version	Platforms
9.5.5.193	Windows
9.5.7.90	Mac

permalink source

state of <agent interface capability> : string

Returns the state of a specific capability of a specific agent interface. For example:

Q: state of capability "quarantine" of agent interface "EDR" of client
A: Off

If the capability specified does not exist, the inspector returns "Singular expression refers to nonexistent object".

The plural returns the states of the capabilities supported by a specific agent interface:

Q: states of capabilities of agent interface "EDR" of client
A: Off
A:
A:
A:
A:

The capability "quarantine" is stateful, the possible states are "Off" and "Bigfix"; the remaining four remediation capabilities, instead, are stateless.

Plural: states

Version	Platforms
9.5.5.193	Windows
9.5.7.90	Mac

permalink source

Casts

<agent interface capability> as string : string

Returns the name and the state of a capability of an agent interface as a string, for example: "quarantine:Off"

Version	Platforms
9.5.5.193	Windows
9.5.7.90	Mac

permalink source