f3nris/riposte-marketplace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
a6a52f7356777a7cee3812814cf8582f8a8a63ab
riposte-marketplace/integrations/harfanglab/scripts
T
History
f3nris 505c518bf8 feat(harfanglab): count agents by filter without listing them (1.6.0) 
The agent collection is DRF-paginated, so `count` already carries the
filtered total. endpoint_count asks for limit=1 and reads it, instead of
pulling up to 10000 agent records back through the playbook the way
endpoint_search does — and endpoint_search only filters on hostname.

Filters cover the documented agent query parameters (hostname, network,
os, version, status, isolation_state, tenant), add lastseen/firstseen
bounds over the DRF range lookups, and keep a raw `filters` escape hatch
for anything else the instance accepts.

The API silently drops a query parameter it does not recognise as a
filter, which turns a typo into a plausible-looking fleet-wide total, so
the fleet `total` is returned next to `count` to make that case visible.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-21 12:29:53 +00:00
..
add_ioc_to_source.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
alert_comment.py
feat(harfanglab): alert triage commands (tag, comment, details, history)
2026-07-21 22:18:01 +02:00
alert_details.py
feat(harfanglab): alert triage commands (tag, comment, details, history)
2026-07-21 22:18:01 +02:00
alert_history.py
feat(harfanglab): alert triage commands (tag, comment, details, history)
2026-07-21 22:18:01 +02:00
alert_tag.py
feat(harfanglab): alert triage commands (tag, comment, details, history)
2026-07-21 22:18:01 +02:00
api_call.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
assign_policy_to_agent.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
av_scan.py
feat(harfanglab): on-demand AV and YARA scan commands
2026-07-21 21:57:37 +02:00
change_security_event_status.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
deisolate_endpoint.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
deisolate_from_threat.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
delete_file.py
feat(harfanglab): file/service/scheduled-task deletion commands
2026-07-21 22:01:22 +02:00
delete_ioc_from_source.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
delete_scheduled_task.py
feat(harfanglab): file/service/scheduled-task deletion commands
2026-07-21 22:01:22 +02:00
delete_service.py
feat(harfanglab): file/service/scheduled-task deletion commands
2026-07-21 22:01:22 +02:00
dump_process.py
feat(harfanglab): kill/dump process response commands
2026-07-21 21:52:39 +02:00
endpoint_count.py
feat(harfanglab): count agents by filter without listing them (1.6.0)
2026-09-21 12:29:53 +00:00
endpoint_search.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
get_alerts.py
feat(harfanglab): alert search and single-threat read commands
2026-07-21 22:14:25 +02:00
get_endpoint_info.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
get_security_events.py
feat(harfanglab): add get_security_events + get_threats ingestion commands, OCSF mappers and ingest hints
2026-06-26 14:15:57 +02:00
get_threat.py
feat(harfanglab): alert search and single-threat read commands
2026-07-21 22:14:25 +02:00
get_threats.py
feat(harfanglab): add get_security_events + get_threats ingestion commands, OCSF mappers and ingest hints
2026-06-26 14:15:57 +02:00
hunt_search_hash.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
hunt_search_runned_process_hash.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
hunt_search_running_process_hash.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
isolate_endpoint.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
isolate_from_threat.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
job_artifact_all.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_downloadfile.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_evtx.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_filesystem.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_hives.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_logs.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_mft.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_ramdump.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_cancel.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
job_driverlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_info.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_ioc.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_networkconnectionlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_networksharelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_persistencelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_pipelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_prefetchlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_processlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_relaunch.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
job_runkeylist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_scheduledtasklist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_servicelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_sessionlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_startuplist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_wmilist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
kill_process.py
feat(harfanglab): kill/dump process response commands
2026-07-21 21:52:39 +02:00
quarantine_file.py
feat(harfanglab): quarantine management commands
2026-07-21 22:04:47 +02:00
quarantine_request_upload.py
feat(harfanglab): quarantine management commands
2026-07-21 22:04:47 +02:00
quarantine_search.py
feat(harfanglab): quarantine management commands
2026-07-21 22:04:47 +02:00
result_artifact_all.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_downloadfile.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_evtx.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_filesystem.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_hives.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_logs.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_mft.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_ramdump.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_driverlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_ioc.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_networkconnectionlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_networksharelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_persistencelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_pipelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_prefetchlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_processlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_runkeylist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_scheduledtasklist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_servicelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_sessionlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_startuplist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_wmilist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_authentication_linux.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_authentication_macos.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_authentication_users.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_authentication_windows.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_binary.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_dns.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_eventlog.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_network.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_process_graph.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_processes.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
test_connection.py
feat: add test_connection command to all integrations for the instance Test button
2026-06-26 00:00:06 +02:00
threat_comment.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
threat_history.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
threat_level.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
threat_note_set.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
threat_status.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
unquarantine_file.py
feat(harfanglab): quarantine management commands
2026-07-21 22:04:47 +02:00
wait_for_job.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
whitelist_add_criterion.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
whitelist_add.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
whitelist_delete.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
whitelist_search.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
yara_scan.py
feat(harfanglab): on-demand AV and YARA scan commands
2026-07-21 21:57:37 +02:00