Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
Applications and Processes - AskJ1 Community
<main> <article class="userContent"> <p><em>We plan to add deeper integration with endpoint protection and device management solutions to obtain services and processes information on hosts.</em></p> <p><em>Note that you can also add custom data by writing a script to call the J1 APIs.</em></p> <h2 data-id="what-certificates-are-installed-being-used">What certificates are installed/being used?</h2> <p><em>Host level certificates details to be added later. You can query for ACM certificates in AWS.</em></p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find Certificate </pre> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find * that (HAS|USES) Certificate return tree </pre> <h2 data-id="what-certificates-are-used-for-which-service">What certificates are used for which service?</h2> <p><em>Host level certificates details to be added later. You can query for ACM certificates in AWS.</em></p> <p>Returns a graph of the resources that uses certificates</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find Certificate that relates to * return tree </pre> <p>Find certificates that are set to expire within 30 days</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find Certificate with expiresOn < date.now + 30days </pre> <h2 data-id="what-versions-of-software-applications-do-i-have-running">What versions of software / applications do I have running?</h2> <p><em>Requires integrations that provide application information. For example, SAML SSO applications from Okta, or macOS apps from Jamf.</em></p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find Application as app return app._type, app.displayName, app.status </pre> <p><em>Note: to keep the entity data structure less noisy, different versions of the same Application are <strong>not</strong> stored as separate entities. Rather, the <code class="code codeInline" spellcheck="false" tabindex="0">version</code> data is kept on the relationship between the host or endpoint device that has installed the application.</em></p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find unique * that (USES|INSTALLED) as installation Application as app return app._type, app.displayName, installation.version </pre> <h2 data-id="what-software-applications-are-not-being-used">What software applications are not being used?</h2> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find Application that !(ASSIGNED|USES) * </pre> <h2 data-id="when-was-the-last-time-a-service-or-server-runtime-was-refreshed-updated-cycled">When was the last time a service or server runtime was refreshed / updated / cycled?</h2> <p>Returns EC2 instances and the AMI images they are using, and the<br> creation timestamp of the AMI:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find Host as h that uses Image as i return h.tag.AccountName, h.displayName, h.instanceId, i.displayName, i.imageId, i.createdOn order by h.tag.AccountName </pre> <p>Returns Lambda functions and when they were last updated:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find Function as f return f.tag.AccountName, f.displayName, f.updatedOn, f.lastModified order by f.tag.AccountName </pre> </article> </main>
.png)