ops-tools
A set of handy tools to make it easier to run to Deep Security.
Manager Tools
Bash
- config-dsRelay.sh
- Query the status of, enable, or disable relay functionality on an agent
- config-rehomeAwsDsManager.sh
- Used by our cloud formation projects to ensure the correct cloud connector sync'd object is activated
- create-iamCloudAccount.sh
- Create an IAM user and associated keys, then use those keys to create the DS cloud connector
- rest-cloudAccountsCreateAws.sh
- Create cloud accounts for all regions
- rest-cloudAccountsCreateAws.sh
- Create cloud account for GovCloud
- rest-tenantsCreate.sh
- Create new tenant
Powershell
- config-dsRelay.ps1
- Query the status of, enable, or disable relay functionality on an agent
- config-ipsXforwardedForRule.ps1
- Create or update an IPS rule which a list of IPS to be blocked based on header added by an AWS ELB
- config-plicy-agentcomm.ps1
- Configure manager agent communication direction on a policy
- get-allHostsSummary.ps1
- Get summary of all host objects in deep security manager similar to dashboard status widget
- get-amComponentVersions.ps1
- Get detailed agent and am engine versions for a host object
- get-computerCreatedEvents.ps1
- Get all computer created system events for a given time frame
- get-firewallrules.ps1
- Get all firewall rules for a given host object
- get-hostIpsRules.ps1
- Get all ips rules assigned to a policy for each host object in the DSM
- get-hostRecoAndAssignedRules.ps1
- Get count of assigned and recommended rules for each host object in the DSM
- get-macFromInterfaces.ps1
- Get all interfaces and their mac addresses for a given host object
- get-managedHostCounts.ps1
- Get a simple count of all Unmanaged vs not Unmanaged hosts in the DSM
- rest-authenticationLogin.ps1
- Rest call to get a Security ID token for subsequent calls. SID returned may be used for SOAP or REST calls
- rest-managerInfoComponents.ps1
- Rest call to get list of current components available in the DSM
- setup-dsSoap.ps1
- Setup script to leave the caller with a current token in $SID and ManagerService instance in $DSM for use in interactive shell. Also starting authenticaiton for new scripts
Agent tools
- awsAgentInstallSamples
- UserData and CfnInit snippets for use in integrating Deep Security Agent deployment in AWS automation tooling
Bash
- get-dsaPolicy.sh
- Query the local DSA for its current policyid and policyname
- install-dsa.sh
- Working project 'one script to rule them all'; single bash script to download, install, and activate a deep security agent on any linux distro, arch, and version