Skip to content

Instantly share code, notes, and snippets.

View jgstew's full-sized avatar

JGStew jgstew

View GitHub Profile
[[Category: Proxy Agent]]
= Overview =
This is the interface between the [[Proxy Agent]] and Plugin executable. The function of a plugin executable is to deliver device commands to the device management system and produce a results file with the outcome of the command execution.
= High-level design =
The ProxyAgent will launch a plugin executable with a set of parameters describing the device(s) to target and the action to take on the device(s). Once launched, the ProxyAgent will continue processing actions and will not interact again with the plugin instance (ie. “Fire and Forget”).
Multiple instances of a particular plugin can be launched concurrently. However, the ProxyAgent will not launch more than one plugin instance targeted against a particular device; each device will have at most one plugin operating on it at any given time.
{
"data_version": 7,
"iteration": 1,
"op_names": [
{ "id": 1, "name": "Lite" },
{ "id": 2, "name": "Medium" },
{ "id": 3, "name": "High" },
{ "id": 4, "name": "Extreme" },
{ "id": 11, "name": "Efficient" },
{ "id": 12, "name": "EfficientLow" },
<?Relevance ps of concatenations of ("There are ";it as string;" tasks right now [ "; now as string; " ]") of number of bes tasks ?>
A: sockets of <network>: socket
A: local address of <socket>: ipv4or6 address
A: remote address of <socket>: ipv4or6 address
A: process of <socket>: process
A: local port of <socket>: integer
A: remote port of <socket>: integer
A: tcp of <socket>: boolean
A: udp of <socket>: boolean
A: tcp state of <socket>: tcp state
A: closed of <tcp state>: boolean
@jgstew
jgstew / Screenshots.ojo
Created October 4, 2016 22:54
BigFix Dashboard that displays screenshots from clients
<?xml version="1.0"?>
<BES>
<Wizard>
<Title>Screenshots</Title>
<UIHooks LaunchType="Document" RequiresAuthoring="false" Menu="Dashboards"></UIHooks>
<DefaultPage>Page1</DefaultPage>
<Page Name="Page1" DocType="HTML 4.01 Transitional" >
<Title>Screenshots</Title>
<HTML><![CDATA[
<head>
<!DOCTYPE HTML>
<html>
<head>
<style>
table, th, td {
border: 1px solid black;
border-collapse: collapse;
}
th, td {
padding: 5px;
@jgstew
jgstew / SingleScreenShot.wrpt
Last active October 4, 2016 03:10
This is meant to be used in a BigFix WebReport
<img height='70%' src='<?Relevance "data:image/png;base64," & unique value of (concatenations of values of it) of results of bes properties "base64 encoded screenshot" ?>'/>
@jgstew
jgstew / CentOS-minimal.ks.cfg
Last active September 21, 2016 04:21
rename this file to `ks.cfg` and place within the root of the ISO. Then add `inst.ks=cdrom` to the boot options within `grub.cfg` and `isolinux.cfg`
#version=DEVEL
# Reference: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Installation_Guide/sect-kickstart-syntax.html
# System authorization information
auth --enableshadow --passalgo=sha512
# Use CDROM installation media
install
cdrom
# Use text install

Keybase proof

I hereby claim:

  • I am jgstew on github.
  • I am jgstew (https://keybase.io/jgstew) on keybase.
  • I have a public key whose fingerprint is CD05 F604 988E 929F 916D CEB0 B357 6906 E7DC 153A

To claim this, I am signing this object:

" <br/> \n// Flagged as a potential virus " +
$('#basic-info > div > div > table > tbody > tr:has(> td:contains("Detection ratio:") ) > td:nth-child(2)').text().trim().split(' / ')[0] +
" times <br/> \n// TrID: " +
$('div#file-details.extra-info > div > div > table > tbody').children('tr:has(> td.field-key:contains("TrID") )').children('td.field-value').text().trim() +
" <br/> \n// Comments: " +
$('#file-details > div > div:has( > span:contains("Comments") )').contents().filter(function() { return this.nodeType == 3; }).text().trim() +
" <br/> \n// ProductName: " +
$('#file-details > div > div:has(> span:contains("Product"))').contents().filter(function() { return this.nodeType == 3; }).text().trim() +
" <br/> \n// ProductVersion: " +
$('#file-details > div > div:has( > div:contains("ProductVersionNumber") )').children('div.floated-field-value').text().trim() +