1E 23.11 (SaaS)

Agent.CheckForUpdates— Check whether extensibility (module and provider) updates are available, and if so to download and install them.

Agent.Echo— Return the specified text.

Agent.GetConnectionInformation— Returns Switch connection and Background Channel information.

Agent.GetDiagnostics— Uses 1E Client performance counters to get various stats.

Agent.GetExtensibility— Get the list of extensibility modules and providers currently loaded by the agent.

Agent.GetInstructionStatistics— Returns execution statistics for instructions that the agent has processed since the last time it was started/restarted.

Agent.GetKeyFiles— Returns names and paths of key files relating to the execution of the Tachyon Agent.

Agent.GetSummary— Returns high-level information about the device the Agent is running on.

Agent.Log— Write a message to the Tachyon Agent log file.

Agent.Sleep— Pause for the specified number of seconds.

Agent.Stagger— Delay for a random amount of time up to a limit.

ContentDistribution.Stage— Downloads content from a web server.

ContentDistribution.StageAndExecute— Similar to Stage (including optional Nomad integration), downloading content from a web server, but also executes a command on successful download.

Device.GetCriticality— Gets the user-defined criticality level for this device.

Device.GetInboundMappedDriveHistory— Retrieves information about any connected shared folders or drives this device uses on remote servers.

Device.GetInboundPrinters— Retrieves information about any connected shared printer servers

Device.GetLocation— Gets the user-defined location for this device.

Device.GetOutboundMappedDriveHistory— Retrieves information about any shared folders this device is exposing.

Device.GetOutboundPrinters— Retrieves information about any printers attached physically that might be shared

Device.GetProcessors— Retrieves information about the CPUs plugged in to the motherboard of the device.

Device.GetSummary— Retrieves a summary of device information, corresponding to (a subset of) the data that is exchanged as part of the Agent's "online" message.

Device.SetCriticality— Sets the user-defined criticality level for this device.

Device.SetLocation— Sets the user-defined location for this device.

Discovery.LookupNetBiosNames— Performs a NetBios reverse lookup on a list of IP addresses

Discovery.ScanPortsOnDevices— Probe a set of ports on a set of devices.

Discovery.SendArpRequest— Performs an ARP request to retrieve the physical address for the supplied IPv4 address.

FileContent.AppendText— Append text to a file.

FileContent.FindAndAppend— Appends a string to the end of a file if it does not contain a specified string.

FileContent.FindAndDelete— Deletes a string from a file.

FileContent.FindAndReplace— Replaces a string in a file with another string.

FileContent.GetTorrentAnnounceUris (deprecated)— Returns all announce URIs contained within the announce and announce-list structures contained inside a torrent file.

FileContent.GetTorrentDescribedFiles (deprecated)— Returns all files described within the info and files structures contained inside a torrent file.

FileContent.GetTorrentInfo (deprecated)— Returns information contained inside a torrent file.

FileContent.WriteText— Writes text to a file, overwriting any existing contents.

FileSystem.CreateTempFile— Creates an empty file in the OS temporary files location, reserving a unique name, and returns its path.

FileSystem.DeleteFileByName— Deletes a file.

FileSystem.FindDirectoryByName— Finds directory paths given a leaf directory name.

FileSystem.FindFileByName— Finds a file by name.

FileSystem.FindFileBySizeAndHash— Finds a file by its size and hash.

FileSystem.GetDigitalSignature— Returns all certificates used in an authenticode signature that are not used for timestamping.

FileSystem.GetDirectoryHash— Returns the hash of a directory and its entire contents, including the contents of subdirectories recursively.

FileSystem.GetFile— Returns the content of a text file.

FileSystem.GetFileByLine— Returns the lines of the given text file(s) matching the supplied regular expression pattern.

FileSystem.GetFileDetails— Retrieves operating system attributes related to the specified file.

FileSystem.GetFileHash— Returns the hash of a file.

FileSystem.GetFilePermissions— Returns the set of permissions for a specified file or directory.

FileSystem.GetFilesInDirectory— Returns the filename, size, created time and modified time of each file in a directory.

FileSystem.GetFilesInFolder (deprecated)— Returns the filename, size, created time and modified time of each file in a directory.

FileSystem.GetHash (deprecated)— Returns the hash of a file or directory.

FileSystem.GetVersionInfo— Returns version and some other details about a file.

FileSystem.PathExists— Checks whether a path exists.

Http.Post— Send the supplied Body text via a HTTP request to the specified Uri endpoint to consume and return the response if completed. This Method is primarily for use with Splunk Event Collectors, but it might support other similar Web APIs.

Interaction.GetActiveResponses— List all active survey responses.

Interaction.GetInteractionState— Display the User Interaction state for all user sessions.

Interaction.GetResponseHistory— Get a response history of User Interaction surveys.

Interaction.GetSessions— Get a list of user sessions.

Interaction.GetWindows— List all open windows within user sessions.

Interaction.InvalidateResponse— Invalidate a User Interaction survey response.

Interaction.SetDoNotDisturb— Set or unset User Interaction Do Not Disturb mode for a user session.

Interaction.ShowAnnouncement— Displays a pop-up announcement to one or more user sessions.

Interaction.ShowNotification— Displays a pop-up notification to one or more user sessions.

Interaction.ShowQuestion— Display a pop-up question to one or more user sessions.

Interaction.ShowSurvey— Display a pop-up survey to one or more user sessions.

Inventory.GetTables— Returns details about the $tables used by Tachyon Activity Record.

Mobile.GetEmailAddress— Get the email address registered on this device.Mobile.GetEmailAddress

Mobile.GetEncryptionStatus— Get the data encryption status of this device.Mobile.GetEncryptionStatus

Mobile.GetLocation— Get the physical location of this device in terms of longitude, latitude and altitude.Mobile.GetLocation

Mobile.GetMobileSummary— Get a summary of the mobile device attributes.Mobile.GetMobileSummary

Mobile.GetPasswordQuality— Get the device's password quality, returning the quality of the worst password on the device.Mobile.GetPasswordQuality

Mobile.IsGPSEnabled— Determine the GPS status of the device.Mobile.IsGPSEnabled

Mobile.IsPrintingSupported— Determine if direct printing is supported on the device.Mobile.IsPrintingSupported

NativeServices.GetWmiNames— Where they exist, returns all the namespaces, classes and columns that match the locator strings.

NativeServices.RegistryDeleteKey— Delete a registry key.

NativeServices.RegistryDeleteUserKey— Deletes a given key and all subkeys and values for every user under HKU.

NativeServices.RegistryDeleteValue— Delete a registry value.

NativeServices.RegistryEnumerateKeys— Enumerate the subkeys under a registry hive & key.

NativeServices.RegistryEnumerateUserKeys— Enumerate the subkeys under a registry key for each user in the HKEY_USERS hive.

NativeServices.RegistryEnumerateUserValues— Get all registry values under a given key for every user under HKU.

NativeServices.RegistryEnumerateValues— Enumerate the values under a registry hive and key.

NativeServices.RegistryGetUserValues— Fetch a registry value for every user under HKU.

NativeServices.RegistryGetValue— Get a registry value.

NativeServices.RegistryKeyExists— Test whether a registry key exists.

NativeServices.RegistrySetUserValues— Sets a registry value for every user under HKU. This will create the value and any key hierarchy required.

NativeServices.RegistrySetValue— Set a registry value.

NativeServices.RegistryUserValueExists— For each user under HKU, tests whether a given value exists.

NativeServices.RegistryValueExists— Test whether a registry value exists.

NativeServices.RunCommand— Execute a command-line.

NativeServices.RunWmiInstanceMethod— Run a WMI object method.

NativeServices.RunWmiQuery— Execure a WMI query.

NativeServices.RunWmiStaticMethod— Run a WMI class method.

Network.GetArpEntries— Get current list of known MAC address to IP address mappings from the network adapter table and the ARP cache.

Network.GetConnections— Get current established TCP connections, for IPv4 and also IPv6 if available.

Network.GetDnsEntriesByAddress— Get the contents of the DNS client cache.

Network.GetIpAddress (deprecated)— Gets IP addresses assigned to the machine.

Network.GetIpAddresses— Gets IP addresses assigned to the machine.

Network.GetListeningEndpoints— Get the list of TCP and UDP endpoints which are listening for incoming connections, for IPv4 and also IPv6 if available.

Network.GetNetworkSummary— Get a summary of the device's network attributes.Network.GetNetworkSummary

Network.GetWiFiNetworks— Returns a list of visible WiFi networks.

Network.SetAirplaneMode— Turn airplane mode, also known as flight mode, on or off.Network.SetAirplaneMode

Network.SetBlueToothMode— Turn Bluetooth on or off.Network.SetBlueToothMode

Network.SetWiFiMode— Turn WiFi mode on or off.Network.SetWiFiMode

Network.Wakeup— Send a Wake-on-LAN (WOL) request to a dormant device.

Nomad.CachedPkgStatus— Get the percentage of the specified content in the local Nomad cache.

Nomad.CancelJob— Cancels download job with the given ID and removes it from Nomad’s job queue.

Nomad.FindBestPkgCache— Find the device that has the greatest percentage of the specified content in its Nomad cache.

Nomad.GetCachedPkgDetails— Gets details about a package cached in Nomad.

Nomad.GetCachePath— Gets the path on disk where Nomad’s cache is located.

Nomad.GetCmContentLocations— Find the Configuration Manager locations (on distribution points - DPs) that have the specified content.

Nomad.GetVariable— Gets the value of the given Nomad "variable".

Nomad.JobsStatus— List active Nomad jobs.

Nomad.Pause— Pause any currently-executing Nomad job. Has no effect if no job is currently running.

Nomad.PauseJobQueue— Pause the Nomad job queue so that no jobs will run.

Nomad.Resume— Resume any currently-paused Nomad job. Has no effect if no job is currently paused.

Nomad.ResumeJobQueue— Resume the currently-paused Nomad job queue. Has no effect if the job queue is not currently paused.

Nomad.RunPkgStatusRequest— Test whether any other SSD (single site download) device has more content than the local Nomad cache.

Nomad.RunSsdQuery— Use Nomad's SSD (single site download) feature to find on which devices the specified content is cached.

Nomad.Status— Get the status and version of the Nomad service.

Nomad.Stop— Stop any currently-executing Nomad job. Has no effect if no job is currently running.

OperatingSystem.ControlService— Action to start, stop, etc. a service or daemon.

OperatingSystem.GetInstalledUpdates— Get list of installed Windows updates.

OperatingSystem.GetProcesses— Get details of executing processes.

OperatingSystem.GetRunningApps— Get details of running applications.OperatingSystem.GetRunningApps

OperatingSystem.GetServiceInfo— Retrieves a list of all services, or a single named service.

OperatingSystem.GetSummary— Get information about the installed version of the operating system.

OperatingSystem.GetUpdatesPendingReboot— Get list of installed Windows updates that are awaiting a reboot.

OperatingSystem.GetUpdateSummary— Get status details of Windows automatic update.

OperatingSystem.KillProcess— Action to terminate a single running process.

OperatingSystem.KillProcesses— Terminate a running process (or set of process instances of the same executable).

Patch.Deploy— Deploy (i.e. download and by default install) either all available patches or specific patches to this device.

Patch.GenerateFullInventoryEvents— Generate Full Inventory Events

Patch.GetMetadata— Query metadata for a single patch or comma-separated list of patches.

Patch.GetStatus— Report how updates are configured for the device.

Patch.List— List the status of patches.

Patch.Restart— Microsoft-suggested procedure to fix Windows Update Agent problems, which has optional steps that include a restart of the Windows Update service.

Patch.TestConnection— Check that the source for patches is accessible.

Policy.ForceStatusReport— Force a report of policy rule status the next time the Agent restarts.

Policy.GetEventSubscriptions— Get the list of event subscriptions in the current policy.

Policy.GetRuleEvaluationHistory— Get a chronological history of recent rule evaluation (for one rule, or all rules).

Policy.GetRules— Get the list of rules, along with their status, in the current policy.

Policy.GetStatistics— Returns a single row with policy-related statistics for the lifetime of the Tachyon Agent process.

Policy.GetSummary— Get a summary of the current policy applied to this Tachyon Agent.

Policy.Invalidate— Reset this Agent to have a null/empty policy.

Scripting.Run— Execute the specified script file.

Scripting.RunText— Execute the specified script supplied as text.

Security.CheckSimpleIoc— Evaluates an IOC (indicator of compromise) definition on a device.

Security.DeleteCertificates— Deletes every certificate in the local machine cert store (as the agent is run as Local System) with the specified thumbprint.

Security.GetCertificates— Returns every certificate in the local machine cert store (as the agent is run as Local System).

Security.GetQuarantineStatus— Gets the current quarantine status of the device.

Security.ModifyQuarantineWhitelist— Allows connections from additional specified IP addresses to an already-quarantined device. This allows security tools other than Tachyon to diagnose and protect the device.

Security.QuarantineDevice— Attempts to force the device to only communicate using Tachyon.

Security.UnquarantineDevice— Allows devices to communicate with devices other than the Tachyon Switch and Background channel servers.

Software.GetInstallations— Gets a list of the installed software available to all users, optionally filtered by product and/or publisher.

Software.GetUserInstallations— Gets a list of the software installed for specific users, optionally filtered by product and/or publisher.

Software.Uninstall— Uninstall the specified software item.

Storage.Check— Tests the existence of a user defined persistent storage table.

Storage.Delete— Removes an existing user defined persistent storage table.

Storage.Get— Indicate whether a persistent storage table of the specified name is present and return its contents if present.

Storage.GetRemote— Retrieve the requested datum directly from the Platform central repository.

Storage.List— Enumerates all user-defined persistent storage tables.

Storage.Set— Set or change the value of the named persistent storage table.

Tagging.Check— Tests the existence of a named tag of a specified type, optionally with the specified value.

Tagging.Clear— Delete all tags of the specified type.

Tagging.Count— Get the quantity of tags of the specified type.

Tagging.Delete— Delete the named tag of the specified type, and indicate if it originally existed.

Tagging.Get— Indicate whether a named tag of the specified type is present and return its value if present.

Tagging.GetAll— Fetch the tag list (containing all tags) of the specified type.

Tagging.Set— Set (or change if already set) the named tag of the specified type to the specified value.

Users.FindLocalGroupMember— List the local groups of which the specified user is an immediate member.

Users.GetInboundConnectionHistory— List the historical inbound Terminal Services (RDP) connection history

Users.GetLocalGroupMembers— List the members of a local group.

Users.GetLoggedOnUsers— List the active (currently logged-on) user sessions.

Users.GetOutboundConnectionHistory— List the historical outbound Terminal Services (RDP) connection history

Users.GetPrimaryUser— Get the primary user of a device.

Utilities.GenerateSequence— Build a sequence of numeric values, starting at 1 up to and including the value of a specified limit.

Utilities.JsonFromTable— Serializes a table variable into a JSON string

Utilities.SplitLines— Convert a delimited fragment of text into multiple rows.

Utilities.TableFromJson— Deserializes a correctly escaped JSON string that represents a two dimensional set of data with consistent columns and rows into a table variable.