Discovery > Discovery Modules > Network Infrastructure > Host Connection by PowerShell Discovery > Host Connection by PowerShell Job

Host Connection by PowerShell Job

This section includes details about the job.

ClosedCommands

This section describes each of the commands used by Host Connection by PowerShell discovery.

Command 

Get-WmiObject -Query "SELECT BuildNumber, Caption, Version, csdversion, lastBootUpTime, otherTypeDescription FROM Win32_OperatingSystem " | Format-List BuildNumber, Caption, Version, csdversion, lastBootUpTime, otherTypeDescription

  • Output 

    BuildNumber : 2600
Caption : Microsoft Windows XP Professional 
Version : 5.1.2600 
csdversion : Service Pack 3 
lastBootUpTime : 20101108094626.357090+120 
otherTypeDescription :

  • Mapping

    The output of this command is used to fill in the attributes of the CIs:

    Command Output Attribute

    CI Type

    CI Attribute

    BuildNumber

    Windows

    Host Operating System Release

    Caption(1)

    Windows

    Host Operating System

    Version

    Windows

    Host Operating System Version

    csdversion

    Windows

    Windows Service Pack

    lastBootUpTime

    Windows

    Host Boot Time

    Caption(2)

    Windows

    Host Operating System Installation Type

Command 

Get-WmiObject -Query "SELECT Domain, Manufacturer, Model, Name FROM Win32_ComputerSystem " | Format-List Domain, Manufacturer, Model, Name

  • Output 

    Domain : od5.lohika.com 
Manufacturer : INTEL_ 
Model : D946GZIS 
Name : DDM-RND-SV

  • Mapping

    The output of this command is used to fill in the attributes of the CIs:

    • Command Output Attribute

    CI Type

    CI Attribute

    Domain

    Windows

    OS domain name

    Manufacturer

    Windows

    PC manufacturer

    Model

    Windows

    Host model

    Name

    Windows

    Host name

Command 

Get-WmiObject -Query "SELECT name, uuid FROM win32_ComputerSystemProduct " | Format-List name, uuid

  • Output 

    name : 
uuid : EAB9B406-CE4F-DB11-9150-0013D4D0773D

  • Mapping

    The output of this command is used to fill in the attributes of the CIs:

    • Command Output Attribute

    CI Type

    CI Attribute

    Uuid

    Windows

    Host BIOS UUID

    Name

    Windows

    Host model

Command 

Get-WmiObject -Query "SELECT serialNumber FROM Win32_BIOS " | Format-List serialNumber

  • Output 

    serialNumber : BQJO749007TY

  • Mapping

    The output of this command is used to fill in the attributes of the CIs:

    • Command Output Attribute

    CI Type

    CI Attribute

    serialNumber

    Windows

    Host serial number

Command 

Get-WmiObject -Query "SELECT serialNumber FROM Win32_SystemEnclosure " | Format-List serialNumber

  • Output 

    serialNumber : BQJO749007TY

  • Mapping

    The output of this command is used to fill in the attributes of the CIs:

    • Command Output Attribute

    CI Type

    CI Attribute

    serialNumber

    Windows

    Host serial number

Command 

Get-WmiObject -Query "SELECT metric1, nextHop FROM Win32_IP4RouteTable WHERE destination = '0.0.0.0' and mask = '0.0.0.0'" | Format-List metric1, nextHop

  • Output 

    metric1 : 20 
nextHop : 134.44.98.7

  • Mapping

    The output of this command is used to fill in the attributes of the CIs:

    • Command Output Attribute

    CI Type

    CI Attribute

    nextHop
    where metric value is minimal

    Windows

    Default gateway

Command 

Get-WmiObject -Query "SELECT dnsServerSearchOrder FROM Win32_NetworkAdapterConfiguration WHERE domainDnsRegistrationEnabled <> NULL" | Format-List dnsServerSearchOrder

  • Output 

    dnsServerSearchOrder : {16.110.135.51, 16.110.135.52} 
dnsServerSearchOrder : {134.44.98.21, 134.44.98.22}

  • Mapping

    The output of this command is used to fill in the attributes of the CIs. Based on the IP addresses, incomplete hosts are created with the attached DNS Server application CI.

Command 

Get-WmiObject -Query "SELECT WinsPrimaryServer, WinsSecondaryServer FROM Win32_NetworkAdapterConfiguration WHERE WinsPrimaryServer <> NULL or WinsSecondaryServer <> NULL" | Format-List WinsPrimaryServer, WinsSecondaryServer

  • Output 

    WinsPrimaryServer : 16.232.7.246 
WinsSecondaryServer : 16.236.105.246

  • Mapping

    • The output of this command is used to fill in the attributes of the CIs. Based on the IP addresses, incomplete hosts are created with the attached WINS Server application CI.

Command 

Get-WmiObject -Query "SELECT dhcpServer FROM Win32_NetworkAdapterConfiguration WHERE dhcpServer <> NULL" | Format-List dhcpServer

  • Output 

    dhcpServer : 134.44.98.22

  • Mapping

    The output of this command is used to fill in the attributes of the CIs. Based on the IP addresses, incomplete hosts are created with the attached DHCP Server application CI.

Command 

Get-WmiObject -Query "SELECT Caption, Description, DhcpEnabled, IPAddress, IPSubnet, MACAddress FROM Win32_NetworkAdapterConfiguration WHERE MACAddress <> NULL" | Format-List Caption, Description, DhcpEnabled, IPAddress, IPSubnet, MACAddress

  • Output 

    Caption : [00000003] WAN Miniport (PPTP) 
Description : WAN Miniport (PPTP) 
DhcpEnabled : False 
IPAddress : 
IPSubnet : 
MACAddress : 50:50:54:50:30:30 
Caption : [00000004] WAN Miniport (PPPOE) 
Description : WAN Miniport (PPPOE) 
DhcpEnabled : False 
IPAddress : 
IPSubnet :
 MACAddress : 33:50:6F:45:30:30 
Caption : [00393219] WAN Miniport (IP) 
Description : WAN (PPP/SLIP) Interface 
DhcpEnabled : False 
IPAddress : {16.213.65.117} 
IPSubnet : {255.255.255.255} 
MACAddress : 00:53:45:00:00:00 
Caption : [00000007] Packet Scheduler Miniport 
Description : Packet Scheduler Miniport 
DhcpEnabled : False 
IPAddress : 
IPSubnet : 
MACAddress : 4A:6F:20:52:41:53 
Caption : [00000008] Intel(R) PRO/100 VE Network Connection 
Description : Intel(R) PRO/100 VE Network Connection - Teefer2 Miniport 
DhcpEnabled : True 
IPAddress : {134.44.99.108} 
IPSubnet : {255.255.252.0} 
MACAddress : 00:16:76:BE:7E:DD 
Caption : [00000009] Packet Scheduler Miniport 
Description : Packet Scheduler Miniport 
DhcpEnabled : False 
IPAddress : 
IPSubnet : 
MACAddress : 00:16:76:BE:7E:DD 
Caption : [00000013] Teefer2 Miniport 
Description : Teefer2 Miniport 
DhcpEnabled : False 
IPAddress : 
IPSubnet : 
MACAddress : 00:16:76:BE:7E:DD 
Caption : [00000014] Teefer2 Miniport 
Description : Teefer2 Miniport 
DhcpEnabled : False 
IPAddress : 
IPSubnet : 
MACAddress : 4A:6F:20:52:41:53

  • Mapping

    The output of this command is used to fill in the attributes of the CIs:

    • Command Output Attribute

    CI Type

    CI Attribute

    Description

    Interface

    Interface description

    DhcpEnabled

    Interface

    DHCP Enabled

    IPAddress

    IpAddress

    IP address

    IPSubnet

    IpAddress

    IP Network Address

    MACAddress

    Interface

    Interface MAC Address
ClosedTrigger Query

ClosedAdapter

  • Input query:

  • Used Scripts:

    • networking.py

    • Host_connection_by_powershell.py

    • Host_discoverer.py

    • Host_win.py

    • Host_win_shell.py

    • Host_win_wmi.py

    • Networking_win.py

    • Networking_win_shell.py

    • Networking_win_wmi.py

  • Triggered CI Data:

    Name Value
    host_cmdbid ${HOST.root_id:NA}
    host_key ${HOST.host_key:NA}
    ip_address ${SOURCE.ip_address}
    ip_domain ${SOURCE.ip_domain}
    mac_addrs ${NA}
ClosedDiscovered CITs

  • Composition

  • Containment

  • DnsServer

  • Interface

  • IpAddress

  • IpSubnet

  • Membership

  • Node

  • Parent

  • PowerShell

  • RunningSoftware

  • Terminal Server

  • Windows

ClosedCreated/Changed Entities

Entity Name

Entity Type

Entity Description

powershell.xml

CIT

Represents the PowerShell protocol

Host Connection by Powershell.xml

Job

Main Job

Powershell_host_connection.xml

Adapter

Job adapter

Host_connection_by_powershell.py

Script

Discovery script

Host_win.py

Script

Discovery script

Host_win_shell.py

Script

Discovery script

Networking_win.py

Script

Discovery script

Networking_win_shell.py

Script

Discovery script

Networking_win_wmi.py

Script

Discovery script

Host_win_wmi.py

Script

Discovery script