1 Reply Latest reply on Oct 19, 2017 1:43 AM by patch

    List of the users from McAfee ESM




      I'm trying to get list of the users/accounts registered on McAfee SIEM.

      There is a great endpoint in API, but it's not working as it should.


      I'm talking about <esm_ip>/rs/esm/help/commands/userGetUserList

      Endpoint needs user password in the url. /rs/esm/userGetUserList?authPW=(authPW)


      It should be fixed.

      first of all it's not safe, second of all since all passwords has to contain at least one special character. So it seems that this endpoint will be broken for every user.


      Did someone manage to get such a list? Using API or it can be even extracted manually from the mcafee esm console.


      thanks in advance