Passes a key for decrypting intel to the agents on host endpoints. This audit is part of the sysinfo audit for newly provisioned agents. Agents cache the symmetric key and cipher type for use when they receive intel.
This audit cannot be imported into a data acquisition script. See Audits That Cannot Be Imported on page 1.
Supported Platforms
Windows, macOS, and Linux
Input Parameters
The following input parameters are available for this audit.
Cipher
Details | Values | Description |
|---|---|---|
Platform | Windows, macOS, and Linux | Windows, macOS, and Linux environments |
Format | String | Valid values are a string of text. |
Required? | yes | This parameter is required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Specify the type of key for the audit. Should be |
HexKey
Details | Values | Description |
|---|---|---|
Platform | Windows, macOS, and Linux | Windows, macOS, and Linux environments |
Format | String | Valid values are a string of text. |
Required? | yes | This parameter is required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Specify the symmetric key for the audit. |
Created
Details | Values | Description |
|---|---|---|
Platform | Windows, macOS, and Linux | Windows, macOS, and Linux environments |
Format | dateTime | Valid values are a timestamp. |
Required? | no | This parameter is not required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Specify the timestamp for the key. When the agent receives a second key, it compares the timestamps to determine if it should replace the first key with the second. |