Shared Agents

Create shared agents to transfer files and execute commands on a remote machines.
A shared agent enables you to transfer files and execute commands on remote machines for a number of incidents. If you want to create an agent for a specific incident only, create a D2 Agent.
Before installing a shared agent, you need to create a shared agent instance. The default hostname must be the same as the endpoint’s system name.
Shared agents enable you to do the following:
  • Perform tasks from the Cortex XSOAR CLI as if you were using the target machine.
  • Run pre-defined D2 Agent automation scripts.
  • Create and configure automation scripts, using Agent Tools.
  • Run existing D2 Agent forensic tools (agent tools) as part of a Cortex XSOAR playbook.
You can run all of the D2 automations, such as D2 Exec, D2Drop, etc. You need to add the name of the shared instance at the end of each automation.

Recommended For You