I need to assess possibility for access to execute "findsystem" command (lookup system by username or IP) remote on ePO-server from servers.
There's an API for ePO somehow, which we can query from a SaaS we have. I would like to be able to do the same from servers.
This is the documentation of that API:
https://sales.d3securityonline.com/D3SOAR30/VSOC/WebHelpCyber/topics/4_integrations/5_endpoint_prote...
I would like to know if there's an API, preferably one with possibility to do Powershell?
And if so, do McAfee have some more documentation around e.g. required headers, tokens, etc. and responses we get back?
I can only find one URL related to Web API -
https://docs.mcafee.com/bundle/epolicy-orchestrator-web-api-reference-guide/page/GUID-C2771B41-22E7-...
which does not have answer to all my queries that needs to be implemented via Powershell scripting
To get any further with this we need McAfee to provide a basic example of a Powershell script which works with their web api.
The example should cover a successful login and a basic reply from the system (e.g. based on a hardcoded query) – a username, group name, hostname, “hello world” etc.
Can you please assist on the above ?