Skip to content

Commit

Permalink
Retire proxytool
Browse files Browse the repository at this point in the history
  • Loading branch information
jshcodes committed Nov 12, 2024
1 parent b487f4c commit 45c912f
Show file tree
Hide file tree
Showing 5 changed files with 1 addition and 924 deletions.
39 changes: 1 addition & 38 deletions samples/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@ The following samples are categorized by CrowdStrike product, and further catego
| [ML Exclusions](#ml-exclusions-samples) | ML Exclusion Audit |
| [Prevention Policies](#prevention-policies-samples) | Clone Prevention Policy<BR/>Create Host Group and attach Prevention Policies<BR/>Prevention Policy Hawk |
| [Incidents](#incidents-samples) | CrowdScore QuickChart<BR/>Incident Triage |
| [Real Time Response](#real-time-response-samples) | Bulk execute a command<BR/>Bulk execute a command (queued)<BR/>Get file from multiple hosts<BR/>Get host uptime<BR/>Get RTR result<BR/>Dump memory for a running process<BR/>My Little RTR<BR/>ProxyTool<BR/>Remotely restart a sensor while taking a capture<BR/>RTR Script Manager |
| [Real Time Response](#real-time-response-samples) | Bulk execute a command<BR/>Bulk execute a command (queued)<BR/>Get file from multiple hosts<BR/>Get host uptime<BR/>Get RTR result<BR/>Dump memory for a running process<BR/>My Little RTR<BR/>Remotely restart a sensor while taking a capture<BR/>RTR Script Manager |
| [Sensor Visibility Exclusions](#sensor-visibility-exclusions-samples) | Sensor Visibility Exclusion Audit |
| [Firewall Management](#firewall-management-samples) | Export Firewall events to a file |

Expand Down Expand Up @@ -1267,7 +1267,6 @@ These samples focus on CrowdStrike's Real Time Response and Real Time Response A
- [Get RTR result](#get-rtr-result)
- [Dump memory for a running process](#dump-memory-for-a-running-process)
- [My Little RTR](#my-little-rtr)
- [ProxyTool](#proxytool)
- [Remotely restart a sensor while taking a capture](#remotely-restart-a-sensor-while-taking-a-capture)
- [Script Manager](#script-manager)

Expand Down Expand Up @@ -1410,42 +1409,6 @@ This sample demonstrates the following CrowdStrike Real Time Response and Real T

---

#### ProxyTool
This [demonstration](proxytool) leverages the Hosts, Host Groups, Sensor Download, and Real-Time Response API to fetch CID or Host Group hosts, and uses the batch command and offline queuing of Real-Time Response API to centrally and conveniently issue Falcon sensor proxy configuration changes.

[![Real Time Response](https://img.shields.io/badge/Service%20Class-ProxyTool-silver?style=for-the-badge&labelColor=C30A16&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABIAAAAOCAYAAAAi2ky3AAABhWlDQ1BJQ0MgcHJvZmlsZQAAKJF9kT1Iw1AUhU9TpaIVBzuIOGSoDmJBVEQ3rUIRKoRaoVUHk5f+CE0akhQXR8G14ODPYtXBxVlXB1dBEPwBcXNzUnSREu9LCi1ifPB4H+e9c7jvXkColZhmtY0Cmm6bqURczGRXxNAruhAEMI1hmVnGrCQl4bu+7hHg512MZ/m/+3N1qzmLAQGReIYZpk28Tjy5aRuc94kjrCirxOfEIyYVSPzIdcXjN84FlwWeGTHTqTniCLFYaGGlhVnR1IgniKOqplO+kPFY5bzFWStVWKNO/sNwTl9e4jrtASSwgEVIEKGggg2UYCNGp06KhRTdx338/a5fIpdCrg0wcsyjDA2y6wefwe/eWvnxMS8pHAfaXxznYxAI7QL1quN8HztO/QQIPgNXetNfrgFTn6RXm1r0COjZBi6um5qyB1zuAH1PhmzKrsTnL+TzwPsZjSkL9N4Cnate3xr3OH0A0tSr5A1wcAgMFSh7zeffHa19+/dNo38/hq9yr+iELI0AAAAGYktHRAAAAAAAAPlDu38AAAAJcEhZcwAACxMAAAsTAQCanBgAAAAHdElNRQflDAsTByz7Va2cAAAAGXRFWHRDb21tZW50AENyZWF0ZWQgd2l0aCBHSU1QV4EOFwAAAYBJREFUKM+lkjFIlVEYht/zn3sFkYYUyUnIRcemhCtCU6JQOLiIU+QeJEQg6BBIm0s4RBCBLjq5OEvgJC1uOniJhivesLx17/97/vO9b4NK4g25157hfHCGB773/cA0HZIEAKiMj+LWiOxljG/i96pnCFP58XHnrWX2+9cj0dYl9Yu2FE9/9rXrcAAgs2eSyiBfOe/XRD503h/CuffOubQVUXL+Jh9BllzBbyJJBgDclVkO4Kukd8zzkXJbeUljIldFTstsmSHM6S81ma2KfPKlFdkGAMY4wzx/bbXapMy21My+YizdKNq5mDzLkrxafSxySFKjSWX2oTmjKzz4vN0r2lOFcL/Q3V0/mX95ILMXTTGYVfaut/aP2+oCMAvnZgCcsF5fcR0dg65YHAdwB+QApADvu0AuOe/ftlJAD7Nsgmm6yBjDtfWORJZlNtFyo/lR5Z7MyheKA5ktSur7sTAHazSG27pehjAiaVfkN8b4XFIJ/wOzbOx07VNRUuHy7w98CzCcGPyWywAAAABJRU5ErkJggg==)](proxytool)

##### Hosts API operations discussed
This sample demonstrates the following CrowdStrike Hosts API operations:

| Operation | Description |
| :--- | :--- |
| [QueryDevicesByFilterScroll](https://www.falconpy.io/Service-Collections/Hosts.html#querydevicesbyfilterscroll) | Search for hosts in your environment by platform, hostname, IP, and other criteria with continuous pagination capability (based on offset pointer which expires after 2 minutes with no maximum limit). |

##### Host Group API operations discussed
This sample demonstrates the following CrowdStrike Host Group API operations:

| Operation | Description |
| :--- | :--- |
| [queryGroupMembers](https://www.falconpy.io/Service-Collections/Host-Group.html#querygroupmembers) | Search for members of a Host Group in your environment by providing a FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria. |

##### Sensor Download API operations discussed
This sample demonstrates the following CrowdStrike Sensor Download API operations:

| Operation | Description |
| :--- | :--- |
| [GetSensorInstallersCCIDByQuery](https://falconpy.io/Service-Collections/Sensor-Download.html#getsensorinstallersccidbyquery) | Get CCID to use with sensor installers. |

##### Real Time Response API operations discussed
This sample demonstrates the following CrowdStrike Real Time Response API operations:

| Operation | Description |
| :--- | :--- |
| [BatchInitSessions](https://falconpy.io/Service-Collections/Real-Time-Response.html#batchinitsessions) | Batch initialize a RTR session on multiple hosts. Before any RTR commands can be used, an active session is needed on the host. |
| [BatchActiveResponderCmd](https://falconpy.io/Service-Collections/Real-Time-Response-Admin.html#batchactiverespondercmd) | Batch executes a RTR active-responder command across the hosts mapped to the given batch ID. |

---

#### Remotely restart a sensor while taking a capture
This [sample](rtr#restart-sensor) will start a TCP capture, restart the sensor, and then retrieve the capture result.

Expand Down
69 changes: 0 additions & 69 deletions samples/proxytool/README.md

This file was deleted.

Loading

0 comments on commit 45c912f

Please sign in to comment.