Stratus GRC-ITSM

https://grcitsm.stratuscyber.com
Admin
Enterprise compliance command center combining GRC and ITSM for CMMC, FedRAMP, and FedRAMP 20x...
Tokens:182,052
Snippets:1,329
Trust Score:6.5
Update:5 days ago
Show doc for...
Tokens:
Raw
### Start Halo IIS site and app pool after reboot

Source: https://grcitsm.stratuscyber.com/admin-guides/onprem-maintenance/upgrading-host-os

Use these PowerShell commands to manually start the Halo app pool and website if they did not auto-start with the W3SVC service after reboot. The Get-Website command confirms the site state.

```powershell
Import-Module WebAdministration
Start-WebAppPool -Name 'CONFIRM-HaloAppPool'
Start-Website    -Name 'CONFIRM-HaloSiteName'

Get-Website -Name 'CONFIRM-HaloSiteName' | Select-Object Name, State

```

--------------------------------

### Minimal alert JSON payload

Source: https://grcitsm.stratuscyber.com/integrations/webhooks/sending-alerts

Only the system and a summary are required. The example uses site_id and summary.

```json
{
  "site_id": 18,
  "summary": "Root login from unrecognised ASN"
}
```

--------------------------------

### Package and deploy the CloudFormation stack

Source: https://grcitsm.stratuscyber.com/integrations/aws

Run these two AWS CLI commands to package the Lambda artifact and deploy the stack. The first command packages the template and outputs a packaged template; the second deploys it with required parameters like WebhookUrl, SiteId, and AuthMode.

```bash
aws cloudformation package --template-file template.yaml --s3-bucket <your-artifact-bucket> --output-template-file packaged.yaml
aws cloudformation deploy --template-file packaged.yaml --stack-name grcitsm-aws-alerts --capabilities CAPABILITY_IAM --parameter-overrides WebhookUrl='https://<tenant>/api/automation/<guid>' SiteId=<halo-site-id> AuthMode=oauth TokenSecretArn='arn:aws:secretsmanager:<region>:<acct>:secret:halo-alert-oauth-xxxx' HaloAuthUrl='https://<tenant>/auth/token'
```

--------------------------------

### GET /Attachment

Source: https://grcitsm.stratuscyber.com/trust-center-access-guide

Lists attachments for a given ticket. This endpoint is applicable where document retrieval is supported.

```APIDOC
## GET /Attachment

### Description
Lists attachments for a given ticket. This endpoint is applicable where document retrieval is supported.

### Method
GET

### Endpoint
/Attachment

### Parameters
#### Query Parameters
- **ticket_id** (integer) - Required - The ID of the ticket whose attachments to list.

### Request Example
```
curl -s "https://YOUR_BASE_URL/Attachment?ticket_id=5678" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
```

### Response
#### Success Response (200)
- **attachments** (array) - List of attachment objects.

#### Response Example
```
{
  "attachments": []
}
```

```

--------------------------------

### Launch Claude Code with the plugin loaded

Source: https://grcitsm.stratuscyber.com/ai

Use this command to launch Claude Code with the plugin ZIP file. The --plugin-dir flag can point to the ZIP or the extracted folder. The plugin is loaded directly without extraction or marketplace registration.

```bash
claude --plugin-dir <path to the ZIP>

```

--------------------------------

### GET /Attachment/{id}

Source: https://grcitsm.stratuscyber.com/trust-center-access-guide

Retrieves a specific attachment by ID. Setting `printit=false` returns a URL to the attachment instead of the binary content.

```APIDOC
## GET /Attachment/{id}

### Description
Retrieves a specific attachment by ID. Setting `printit=false` returns a URL to the attachment instead of the binary content.

### Method
GET

### Endpoint
/Attachment/{id}

### Parameters
#### Path Parameters
- **id** (integer) - Required - The attachment ID.

#### Query Parameters
- **printit** (boolean) - Optional - If `false`, returns a URL to the attachment.

### Request Example
```
curl -s "https://YOUR_BASE_URL/Attachment/91011?printit=false" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
```

### Response
#### Success Response (200)
- **url** (string) - The URL to the attachment when `printit=false`.

#### Response Example
```
{
  "url": "https://..."
}
```

```

--------------------------------

### GET /Report/{id}

Source: https://grcitsm.stratuscyber.com/trust-center-access-guide

Pulls a report together with its data. The report ID must be one of the IDs provided in your credential package.

```APIDOC
## GET /Report/{id}

### Description
Pulls a report together with its data. The report ID must be one of the IDs provided in your credential package.

### Method
GET

### Endpoint
/Report/{id}

### Parameters
#### Path Parameters
- **id** (integer) - Required - The report ID from your credential package.

#### Query Parameters
- **loadreport** (boolean) - Required - Must be `true` to include the report data.

### Request Example
```
curl -s "https://YOUR_BASE_URL/Report/1234?loadreport=true" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
```

### Response
#### Success Response (200)
- **report** (object) - The report data.

#### Response Example
```
{
  "report": {}
}
```

```
Tokens:
Raw