Get misconfigurations by token. The starting token can be obtained by the Get Misconfigurations Starting Token action.

External Documentation

To learn more, visit the GYTPOL documentation.

​
Parameters

ParameterDescription
TokenThe misconfigurations token.

​
Example Output

{
	"computers": [
		{
			"latestHostReportingDt": "2023-01-17T18:25:05.5389826+02:00",
			"latestScanTimeDt": "2023-01-17T18:24:47.4503679+02:00",
			"computer": "YOUR-COMPUTER-NAME",
			"computerOu": "COMPUTER-OU",
			"domainName": "YOUR-DOMAIN-NAME",
			"clientVer": "2.26.1.0",
			"ipAddress": "10.67.137.160",
			"os": "Win 10 Enterprise",
			"isVdi": false,
			"isServer": false,
			"isDC": false,
			"miscon": [
				{
					"topicCode": "gytPSVerIssue",
					"user": null,
					"severity": "Medium",
					"addInfo": "{\"PSversions\":\"2; 5.1.19041.2364\",\"occurrences\":1}",
					"param": "2; 5.1.19041.2364",
					"paramExtra": null,
					"isRemediable": true,
					"isMuted": false,
					"mutedByRuleId": 0,
					"hostReportingDt": "2023-01-17T18:25:05.5389826+02:00",
					"scanTimeDt": "2023-01-17T18:24:47.4503679+02:00"
				},
				{
					"topicCode": "gytSmbAnonymous",
					"user": null,
					"severity": "Medium",
					"addInfo": "{\"Current Value\":0,\"Expected Value\":\"1\",\"RegistryName\":\"RestrictAnonymous\",\"RegistryPath\":\"HKLM:\\\\System\\\\CurrentControlSet\\\\Control\\\\Lsa\",\"Shares withEveryone\":\"N/A\",\"Shares without Everyone\":\"N/A\",\"occurrences\":1}",
					"param": "No shares; The configured value is not secure",
					"paramExtra": null,
					"isRemediable": true,
					"isMuted": false,
					"mutedByRuleId": 0,
					"hostReportingDt": "2023-01-17T18:25:05.5389826+02:00",
					"scanTimeDt": "2023-01-17T18:24:47.4503679+02:00"
				}
			]
		}
	],
	"token": "NextToken"
}

​
Workflow Library Example

Get Misconfigurations by Token with Gytpol and Send Results Via Email

Preview this Workflow on desktop