Skip to main content

Lansweeper

This Integration is part of the Lansweeper Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

The Lansweeper integration allows users to retrieve the asset details. This integration was integrated and tested with version 2.0 of Lansweeper

Configure Lansweeper on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for Lansweeper.

  3. Click Add instance to create and configure a new integration instance.

    ParameterDescriptionRequired
    Application Identity CodeIdentity code generated for the specific application.True
    Trust any certificate (not secure)False
    Use system proxy settingsFalse
  4. Click Test to validate the URLs, token, and connection.

Commands#

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

ls-site-list#


Retrieve a list of all sites to which an application has access.

Base Command#

ls-site-list

Input#

There are no input arguments for this command.

Context Output#

PathTypeDescription
Lansweeper.Site.idStringSite ID.
Lansweeper.Site.nameStringSite name.

Command Example#

!ls-site-list

Context Example#

{
"Lansweeper": {
"Site": [
{
"id": "401d153d-2a59-45eb-879a-c291390448ca",
"name": "api-demo-data"
},
{
"id": "56d4ed4f-b2ad-4587-91b5-07bd453c5c76",
"name": "api-demo-data-v2"
}
]
}
}

Human Readable Output#

Authorized Site(s)#

Site IDSite Name
401d153d-2a59-45eb-879a-c291390448caapi-demo-data
56d4ed4f-b2ad-4587-91b5-07bd453c5c76api-demo-data-v2

ls-ip-hunt#


Return a list of all assets associated with a given site and IP address.

Base Command#

ls-ip-hunt

Input#

Argument NameDescriptionRequired
site_idSpecify the site ID to retrieve the assets.

Note: To get site ID, execute ls-site-list command.
Optional
ipSpecify the IP address to retrieve the specific asset.

Note: Supports multiple comma separated values.
Required
limitNumber of records to retrieve in the response.

Note: The minimum value supported is 1 and maximum value supported is 500. Default is 50.
Optional

Context Output#

PathTypeDescription
Lansweeper.IP.assetIdStringAsset ID.
Lansweeper.IP.assetBasicInfo.nameStringAsset name.
Lansweeper.IP.assetBasicInfo.domainStringDomain the asset belongs to.
Lansweeper.IP.assetBasicInfo.descriptionStringDescription of the asset.
Lansweeper.IP.assetBasicInfo.firstSeenDateDate and time at which the asset was first scanned.
Lansweeper.IP.assetBasicInfo.fqdnStringFQDN of the asset.
Lansweeper.IP.assetBasicInfo.ipAddressStringIP address associated with the asset.
Lansweeper.IP.assetBasicInfo.lastSeenDateDate and time at which the asset was last scanned.
Lansweeper.IP.assetBasicInfo.macStringAsset's main MAC address.
Lansweeper.IP.assetBasicInfo.userNameStringName of the last logged on user.
Lansweeper.IP.assetBasicInfo.typeStringType of the asset.
Lansweeper.IP.assetBasicInfo.userDomainStringDomain of the last logged on user.
Lansweeper.IP.assetCustom.skuStringAsset's SKU.
Lansweeper.IP.assetCustom.modelStringModel of the asset.
Lansweeper.IP.assetCustom.firmwareVersionStringFirmware version, retrieved from plug and play devices via the UPnP, DNS-SD or SSDP protocol.
Lansweeper.IP.assetCustom.purchaseDateDateWhen the asset was purchased.
Lansweeper.IP.assetCustom.warrantyDateDateWhen the asset's warranty expires.
Lansweeper.IP.assetCustom.commentStringComment on the asset..
Lansweeper.IP.assetCustom.locationStringLocation of the asset.
Lansweeper.IP.assetCustom.contactStringContact person of the asset.
Lansweeper.IP.assetCustom.manufacturerStringManufacturer of the asset.
Lansweeper.IP.assetCustom.serialNumberStringSerial number of the asset.
Lansweeper.IP.assetCustom.dnsNameStringDNS name of the asset.
Lansweeper.IP.assetCustom.stateNameStringState name of the asset.
Lansweeper.IP.operatingSystem.captionStringShort description of the object. The string includes the operating system version.
Lansweeper.IP.operatingSystem.productTypeStringType of the operating system.
Lansweeper.IP.urlStringURL to the summary of the asset.
Lansweeper.IP.siteIdStringThe ID of the site to which the asset belongs.
Lansweeper.IP.siteNameStringThe name of the site to which the asset belongs.

Command Example#

!ls-ip-hunt ip="192.168.2.1"

Context Example#

{
"Lansweeper": {
"IP": [
{
"assetBasicInfo": {
"firstSeen": "2018-06-15T12:03:34.917Z",
"ipAddress": "192.168.2.1",
"lastSeen": "2018-07-19T14:45:58.793Z",
"mac": "02:0C:29:FE:A6:64",
"name": "192.168.2.1",
"type": "Network device"
},
"assetCustom": {
"stateName": "Active"
},
"assetId": "608fa4d61be3044511e7239e",
"siteId": "401d153d-2a59-45eb-879a-c291390448ca",
"siteName": "api-demo-data",
"url": "https://app.lansweeper.com/api-demo-data/asset/MTI3My1Bc3NldC0wZGYzZGRiYS0zNzA3LTQ0ZWUtOWI0My1jMTkxOTQ1NmZkYTE=/summary"
},
{
"assetBasicInfo": {
"firstSeen": "2018-06-15T10:02:34.917Z",
"ipAddress": "192.168.2.1",
"lastSeen": "2018-07-19T12:44:58.793Z",
"mac": "02:0C:29:FE:A6:64",
"name": "192.168.2.1",
"type": "Network device"
},
"assetCustom": {
"stateName": "Active"
},
"assetId": "60eed3ba8a037f9341893701",
"siteId": "56d4ed4f-b2ad-4587-91b5-07bd453c5c76",
"siteName": "api-demo-data-v2",
"url": "https://app.lansweeper.com/api-demo-data-v2/asset/MTI3My1Bc3NldC1mODdkZjg5MS1kNmVkLTQyYzgtYThmMS1jZDJmMTBlYmE1ZGU=/summary"
}
]
}
}

Human Readable Output#

Asset(s)#

NameDomainUser NameUser DomainFQDNDescriptionTypeIP AddressMac AddressModelManufacturerSerial NumberSKUSite NameFirst SeenLast Seen
XLAN-897Demo-domainJohn DoeDemo-domainDemo67.comVideo / Image EditingAPC192.168.2.103:00:00:00:00:57iMac18,3AppleLAN897LN001api-demo-data2018-02-12T16:04:02.733Z2018-02-12T16:04:02.733Z
XLAN-897Demo-domainJohn DoeDemo-domainDemo67.comVideo / Image EditingAPC192.168.2.103:00:00:00:00:57iMac18,3AppleLAN897LN001api-demo-data-v22018-02-12T14:04:02.733Z2021-08-10T14:18:20.913Z

ls-mac-hunt#


Return a list of all assets associated with a given site and MAC address.

Base Command#

ls-mac-hunt

Input#

Argument NameDescriptionRequired
site_idSpecify the site ID to retrieve the assets.

Note: To get site ID, execute ls-site-list command.
Optional
mac_addressSpecify the MAC address to retrieve the specific asset.

Note: Supports multiple comma separated values.
Required
limitNumber of records to retrieve in the response.

Note: The minimum value supported is 1 and maximum value supported is 500. Default is 50.
Optional

Context Output#

PathTypeDescription
Lansweeper.Mac.assetIdStringAsset ID.
Lansweeper.Mac.assetBasicInfo.nameStringAsset name.
Lansweeper.Mac.assetBasicInfo.domainStringDomain the asset belongs to.
Lansweeper.Mac.assetBasicInfo.descriptionStringDescription of the asset.
Lansweeper.Mac.assetBasicInfo.firstSeenDateDate and time at which the asset was first scanned.
Lansweeper.Mac.assetBasicInfo.fqdnStringFQDN of the asset.
Lansweeper.Mac.assetBasicInfo.ipAddressStringIP address associated with the asset.
Lansweeper.Mac.assetBasicInfo.lastSeenDateDate and time at which the asset was last scanned.
Lansweeper.Mac.assetBasicInfo.macStringAsset's main MAC address.
Lansweeper.Mac.assetBasicInfo.userNameStringName of the last logged on user.
Lansweeper.Mac.assetBasicInfo.typeStringType of the asset.
Lansweeper.Mac.assetBasicInfo.userDomainStringDomain of the last logged on user.
Lansweeper.Mac.assetCustom.skuStringAsset's SKU.
Lansweeper.Mac.assetCustom.modelStringModel of the asset.
Lansweeper.Mac.assetCustom.firmwareVersionStringFirmware version, retrieved from plug and play devices via the UPnP, DNS-SD or SSDP protocol.
Lansweeper.Mac.assetCustom.purchaseDateDateWhen the asset was purchased.
Lansweeper.Mac.assetCustom.warrantyDateDateWhen the asset's warranty expires.
Lansweeper.Mac.assetCustom.commentStringComment on the asset..
Lansweeper.Mac.assetCustom.locationStringLocation of the asset.
Lansweeper.Mac.assetCustom.contactStringContact person of the asset.
Lansweeper.Mac.assetCustom.manufacturerStringManufacturer of the asset.
Lansweeper.Mac.assetCustom.serialNumberStringSerial number of the asset.
Lansweeper.Mac.assetCustom.dnsNameStringDNS name of the asset.
Lansweeper.Mac.assetCustom.stateNameStringState name of the asset.
Lansweeper.Mac.operatingSystem.captionStringShort description of the object. The string includes the operating system version.
Lansweeper.Mac.operatingSystem.productTypeStringType of the operating system.
Lansweeper.Mac.urlStringURL to the summary of the asset.
Lansweeper.Mac.siteIdStringThe ID of the site to which the asset belongs.
Lansweeper.Mac.siteNameStringThe name of the site to which the asset belongs.

Command Example#

!ls-mac-hunt mac_address="03:00:00:00:00:57"

Context Example#

{
"Lansweeper": {
"Mac": [
{
"assetBasicInfo": {
"domain": "Demo-domain",
"firstSeen": "2018-02-12T16:04:02.733Z",
"fqdn": "Demo67.com",
"ipAddress": "10.10.11.104",
"lastSeen": "2018-02-12T16:04:02.733Z",
"mac": "03:00:00:00:00:57",
"name": "XLAN-897",
"type": "APC",
"userDomain": "Demo-domain"
},
"assetCustom": {
"location": "Main Branch",
"purchaseDate": "2018-02-02T00:00:00.000Z",
"serialNumber": "LAN897",
"stateName": "Active",
"warrantyDate": "2023-02-02T00:00:00.000Z"
},
"assetId": "608fa4c81be3044511e6d97f",
"siteId": "401d153d-2a59-45eb-879a-c291390448ca",
"siteName": "api-demo-data",
"url": "https://app.lansweeper.com/api-demo-data/asset/ODk3LUFzc2V0LTBkZjNkZGJhLTM3MDctNDRlZS05YjQzLWMxOTE5NDU2ZmRhMQ==/summary"
},
{
"assetBasicInfo": {
"domain": "Demo-domain",
"firstSeen": "2018-02-12T14:04:02.733Z",
"fqdn": "Demo67.com",
"ipAddress": "10.10.11.104",
"lastSeen": "2021-08-10T14:18:20.913Z",
"mac": "03:00:00:00:00:57",
"name": "XLAN-897",
"type": "APC",
"userDomain": "Demo-domain"
},
"assetCustom": {
"location": "Main Branch",
"purchaseDate": "2018-02-02T02:00:00.000Z",
"serialNumber": "LAN897",
"stateName": "Active",
"warrantyDate": "2023-02-02T02:00:00.000Z"
},
"assetId": "60eed3b78a037f934189271c",
"siteId": "56d4ed4f-b2ad-4587-91b5-07bd453c5c76",
"siteName": "api-demo-data-v2",
"url": "https://app.lansweeper.com/api-demo-data-v2/asset/ODk3LUFzc2V0LWY4N2RmODkxLWQ2ZWQtNDJjOC1hOGYxLWNkMmYxMGViYTVkZQ==/summary"
}
]
}
}

Human Readable Output#

Asset(s)#

NameDomainUser NameUser DomainFQDNDescriptionTypeIP AddressMac AddressModelManufacturerSerial NumberSKUSite NameFirst SeenLast Seen
XLAN-897Demo-domainJohn DoeDemo-domainDemo67.comVideo / Image EditingAPC10.10.11.10403:00:00:00:00:57iMac18,3AppleLAN897LN001api-demo-data2018-02-12T16:04:02.733Z2018-02-12T16:04:02.733Z
XLAN-897Demo-domainJohn DoeDemo-domainDemo67.comVideo / Image EditingAPC10.10.11.10403:00:00:00:00:57iMac18,3AppleLAN897LN001api-demo-data-v22018-02-12T14:04:02.733Z2021-08-10T14:18:20.913Z