Working on Policy List Grab

2025-08-19 17:11:11 -04:00
parent 88a1bae574
commit 79a0541871
4 changed files with 40 additions and 2 deletions
@@ -0,0 +1,33 @@
+import datetime
+import requests
+import json
+import os
+
+def allowlistexechistories(url): 
+    endpoint = url + '/v1/group'
+    print("[+] Grabbing All Policies")
+    payload = {}
+    headers = {
+        "X-APIKey": os.getenv('APIKEY')
+    }
+    response = requests.request("POST", endpoint, headers=headers, data=payload, verify=False)
+    parse_text = json.loads(response.text)
+    policiesnames = []
+    policyids = []
+    for index, list in enumerate(parse_text['response']['groups'], start=1):
+        print(f"{index}. {list['name']}")
+        policiesnames.append(list['name'])
+        policyids.append(list['groupid'])
+    choice = input("Select Policy Group: ")
+    choice = int(choice) - 1
+    endpoint = url + '/v1/logging/exechistories'
+    payload_dict = {
+        "type":[1,2,6,7],
+        "policy": [policiesnames[choice]]
+    }
+    payload = json.dumps(payload_dict)
+    print(payload)
+    response = requests.request("POST", endpoint, headers=headers, data=payload, verify=False)
+    parse_text = json.loads(response.text)
+    for item in parse_text['response']['exechistories']:
+        print(item['checkpoint'])