Cyber Security

Cortex XDR agent (command line)

https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-6/cortex-xdr-agent-admin/cortex-xdr-agent-for-mac/troubleshoot-cortex-xdr-for-mac/cytool-for-mac.html

# List processes protected by Cortex XDR.

# sudo "/Library/Application Support/PaloAltoNetworks/Traps/bin/cytool" enum

# List startup status for Cortex XDR agent and daemons.

# sudo "/Library/Application Support/PaloAltoNetworks/Traps/bin/cytool" startup query

# List runtime status for agent, daemons, and kernel extension

# sudo "/Library/Application Support/PaloAltoNetworks/Traps/bin/cytool" runtime query

# Display persistent databases.

# sudo "/Library/Application Support/PaloAltoNetworks/Traps/bin/cytool" persist list

#sudo "/Library/Application Support/PaloAltoNetworks/Traps/bin/cytool" opswat version

#sudo "/Library/Application Support/PaloAltoNetworks/Traps/bin/cytool" opswat installed

#sudo "/Library/Application Support/PaloAltoNetworks/Traps/bin/cytool" opswat running

#sudo "/Library/Application Support/PaloAltoNetworks/Traps/bin/cytool" opswat protected

Useful Links

https://www.cyberark.com/

Netskope

Netskope Client Overview

https://docs.netskope.com/en/netskope-client-overview.html

Deploy Netskope Client with JAMF

https://docs.netskope.com/en/deploy-netskope-client-with-jamf.html

Netskope Client Command Reference

https://docs.netskope.com/en/netskope-client-command-reference.html

Client installation directory:

In Windows: C:\Program Files (x86)\netskope\stagent

In macOS: /Library/Application\ Support/Netskope/STAgent/

Example in Windows

Example 1: Get NPA status

C:\Program Files (x86)\netskope\stagent\nsdiag -n

Example 2: Update configuration

C:\Program Files (x86)\netskope\stagent\nsdiag -u

Example 3: Show Netskope Client version

C:\Program Files (x86)\netskope\stagent\nsdiag -v

Example 4: Use this command to display the client details such as client status, tunnel status, Gateway, On-PremStatus, Gateway IP, Tunnel Protocol, Explicit Proxy.

C:\Program Files (x86)\netskope\stagent\nsdiag -f

Example 5: This option shows URL performance stats like connect time, look-up time etc as shown below.

C:\Program Files (x86)\netskope\stagent\nsdiag -r google.com

Example 6: Show this help

C:\Program Files (x86)\netskope\stagent\nsdiag -h

Example in macOS

Example 1: Get NPA status

/Library/Application\ Support/Netskope/STAgent/nsdiag -n

Example 2: Update configuration

/Library/Application\ Support/Netskope/STAgent/nsdiag -u

Example 3: Show Netskope Client version

/Library/Application\ Support/Netskope/STAgent/nsdiag -v

Example 4: Use this command to display the client details such as client status, tunnel status, Gateway, On-PremStatus, Gateway IP, Tunnel Protocol, Explicit Proxy.

/Library/Application\ Support/Netskope/STAgent/nsdiag -f

Example 5: This option shows URL performance stats like connect time, look-up time etc as shown below.

/Library/Application\ Support/Netskope/STAgent/nsdiag -r google.com

Example 6: Show this help

/Library/Application\ Support/Netskope/STAgent/nsdiag -h