### Agent Proxy Configuration Example Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2084470941 Illustrates how to configure proxy settings for the agent installer using the -p switch. Supports both authenticated and unauthenticated proxies. ```bash ./cybercnsagent.exe -c `██` -e `███████████` -i -p :@:; ``` ```bash -p user:pass@proxy.example.me:3128 ``` ```bash -p proxy.example.me:3128 ``` -------------------------------- ### Agent Installer with Proxy Configuration Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2084470941/Agent%2BConfigurations Use the -p switch with your Agent install command to configure proxy settings. This example shows how to include username, password, IP address, and port for an authenticated proxy. ```bash ./cybercnsagent.exe -c `██` -e `███████████` -i -p :@:; ``` -------------------------------- ### Install ConnectSecure Agent via PowerShell (Windows) Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2103410891 This PowerShell script is the preferred method for installing the agent. Copy the script to your clipboard, open PowerShell as Administrator, and run it. You may need to press Enter after the download completes to start the installation. ```powershell Copy-Item Env:\ProgramData\CyberCNS\cybercnsagent.exe -Destination C:\ProgramData\CyberCNS\cybercnsagent.exe . cybercnsagent.exe -c <**CompanyID** > -e <**TenantID** > -j <**User_Secret** > -i ``` -------------------------------- ### Create Installation Directory and Assign Ownership Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2444197909/Least%2BPrivileged%2BLinux%2BUser%2Bfor%2BProbe Sets up the probe installation directory, ensuring only the probe user and root have read/write access. ```bash sudo mkdir -p /opt/probe sudo chown probeuser: /opt/probe sudo chmod 750 /opt/probe ``` -------------------------------- ### Example Data for GET /r/company/agents Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2128314664 This is an example of the JSON response structure when querying the /r/company/agents endpoint. It includes details about company agents such as ID, name, version, host, and OS information. ```json { "status": true, "data": [ { "old_id": "string", "name": "string", "agent_version": "string", "host_name": "string", "ip": "string", "os_type": "string", "os_platform": "string", "os_name": "string", "os_version": "string", "kernel": "string", "agent_type": "string", "last_scanned_time": "string", "last_reported": "string", "max_thread_count": 0, "is_deprecated": true, "deprecated_time": "string", "reported": true, "company_ref_id": "string", "company_id": 0, "tenantid": 0, "id": 0, "created": "string", "updated": "string" } ] } ``` -------------------------------- ### Install V4 Agent on Windows EC2 Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2103410891 Use this PowerShell script to download, install, and start the V4 Agent on a Windows EC2 instance. Ensure PowerShell is run as an Administrator. ```powershell Invoke-WebRequest -Uri "https://myconnectsecure.com/download/agent?tenant_name=CHANGEME" -OutFile "ConnectSecureAgent.exe" Start-Process -FilePath "ConnectSecureAgent.exe" -ArgumentList "/SILENT /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP- /NOCANCEL /LOG=C:\\ProgramData\\ConnectSecure\\install.log" -Wait ``` -------------------------------- ### CyberCNS Agent Installation and Initialization Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2351693852/Agent%2BCommand%2BLine%2BOptions Commands for installing, initializing, or reinitializing the CyberCNS agent. The -g flag adds tags during initial install. ```bash ./cybercnsagent.exe -i ``` ```bash ./cybercnsagent.exe -f ``` ```bash ./cybercnsagent.exe -w ``` -------------------------------- ### GitLab Redirect URI Example Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2092040222/GitLab%2BAuthentication%2BProvider Example of a redirect URI for GitLab integration. Ensure this matches your instance's domain and the callback path. ```text https://acme-gzoe4x.zitadel.cloud/ui/login/login/externalidp/callback ``` -------------------------------- ### API Endpoint - GET /r/company/agents Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2128314664/V4%2BAPI%2BInformation Example of fetching company agents using the GET /r/company/agents endpoint. Supports skip, limit, and sort parameters for pagination and ordering. ```json { "status": true, "data": [ { "old_id": "string", "name": "string", "agent_version": "string", "host_name": "string", "ip": "string", "os_type": "string", "os_platform": "string", "os_name": "string", "os_version": "string", "kernel": "string", "agent_type": "string", "last_scanned_time": "string", "last_reported": "string", "max_thread_count": 0, "is_deprecated": true, "deprecated_time": "string", "reported": true, "company_ref_id": "string", "company_id": 0, "tenantid": 0, "id": 0, "created": "string", "updated": "string" } ] } ``` -------------------------------- ### Install ConnectSecure Agent on Windows Server EC2 Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2103410891/How%2BTo%2BInstall%2BConnectSecure%2BAgent Use this PowerShell command to download, install, and start the ConnectSecure agent on a Windows EC2 instance. Ensure PowerShell is run as Administrator. ```powershell Invoke-WebRequest -Uri "https://myconnectsecure.com/api/v4/configuration/agentlink?ostype=windows" -OutFile "C:\\ProgramData\\ConnectSecureAgent.msi" Start-Process msiexec.exe -ArgumentList "/i C:\\ProgramData\\ConnectSecureAgent.msi /qn" -Wait Remove-Item "C:\\ProgramData\\ConnectSecureAgent.msi" ``` -------------------------------- ### Example OSQuery Search for 'Edge' Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2191851641/How%2BTo%2BUse%2BOSQuery%2Bto%2BValidate%2BInstalled%2BSoftware This is an example of the OSQuery command to search for the 'Edge' browser. It demonstrates how to replace the placeholder 'XXXXX' with a specific application name. ```powershell select * from programs where name like '%edge%' ; ``` -------------------------------- ### Install ConnectSecure Agent via Command Line (Windows) Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2103410891 Use this command in the Command Prompt (as Administrator) to install the agent. Replace placeholders with your CompanyID, TenantID, and User_Secret. ```bash cybercnsagent.exe -c <**CompanyID** > -e <**TenantID** > -j <**User_Secret** > -i ``` -------------------------------- ### Agent Installer with Authenticated Proxy Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2084470941/Agent%2BConfigurations Configure an authenticated proxy by providing the username, password, IP address or hostname, and port to the -p switch during agent installation. ```bash -p user:pass@proxy.example.me:3128 ``` -------------------------------- ### API Authentication using Base64 Encoding Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2128314664 To log in and authorize API access, construct a string with tenant, client_id, and client_secret, then encode it using Base64. Ensure UTF8 encoding is used before Base64 to avoid errors. ```bash Client**-**Auth**-**Token : (base64 (tenant+client_id:client_secret)) ``` -------------------------------- ### Retrieve macOS Agent Team Identifier Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2103410891 Run this command on a device with the agent installed to get the Team Identifier required for PPPC profiles. The output format is 'TeamIdentifier=XXXXXXXXXX'. ```bash codesign -dvvv /opt/CyberCNSAgent/cybercnsagent_darwin 2>&1 | grep 'TeamIdentifier' ``` -------------------------------- ### Example: Enumerate SSL Ciphers for a Specific IP Source: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2265055368/How%2BTo%2BValidate%2BNetwork%2BSSL%2BCiphers%2Bby%2BPowerShell This is a concrete example of the NMAP command to enumerate SSL ciphers for the IP address 10.0.0.17 on port 443. ```powershell .\nmap.exe --script ssl-enum-ciphers -p 443 10.0.0.17 ```