Custom Stages
Neurons Bots can range from being short and simple to long and complex. You have the option to create custom stages to suit your needs by use of scripting. If you have a script that you will use regularly you can create the bot to be added to the User Stages section. Learn more about User Stages.
You can create custom stages using the following:
- osquery: Use an osquery to discover information from your managed endpoints.
You can specify whether the query supports singular or multiple results.
Singular mode: variables from the query can be used in stages without a for each loop.
Multiple mode: connect for each stage so that it can loop through the results that return multiple results per endpoint.
- PowerShell Query: Use a PowerShell Query to discover information from your managed endpoints.
Queries can be run in the security context of the end user or as System.
The PowerShell Type can be selected from PowerShell, Core, or Auto. If the Powershell core runtime is installed it will execute the script against PowerShell core, otherwise it will execute it against PowerShell.
You can specify whether the query supports singular or multiple results.
Singular mode: variables from the query can be used in stages without a for each loop.
Multiple mode: connect for each stage so that it can loop through the results that return multiple results per endpoint.
- Bash Action: Use a Bash Action to execute a custom action on the endpoints within the bot.
Actions can be run in the context of the end user or as System.
- Command Action: Use a Command Action to execute a custom action on the endpoints within the bot.
Actions can be run in the context of the end user or as System. -
To run the windows system file checker repair corrupted files:
sfc /scannow
-
To check and fix the status of the physical disk by unmounting it:
chkdsk /offlinescanandfix
Command Action Example
Following are two examples to execute command action:
- PowerShell Action: Execute PowerShell on endpoints within the bot.
Actions can be run in the security context of the end user or as System.
The PowerShell Type can be selected from PowerShell, Core, or Auto. If the runtime is installed it will execute the script against PowerShell core, otherwise it will execute it against PowerShell.