Skip to main content
Question

FireEye agent version EA

  • July 21, 2017
  • 4 replies
  • 34 views

Forum|alt.badge.img+11

Does anyone have an EA for FireEye to detect which version of the agent is installed on macOS?

4 replies

Mhomar
Forum|alt.badge.img+9
  • Contributor
  • July 21, 2017

This is what I use :

#!/bin/sh
#
############################################################################
#
# Extension Attribute checks to display FireEye HX installed version number.
# 
#
############################################################################
FireEyeVersion=`/usr/bin/defaults read /Library/FireEye/xagt/xagt.app/Contents/Info CFBundleVersion`
echo "<result> $FireEyeVersion </result>"

exit 0

Forum|alt.badge.img+26
  • Honored Contributor
  • September 20, 2017

I combined @Mhomar info and the logic that Jamf uses for their Patch Reporting EAs to come up with this:

#!/bin/bash

##############################################################################
# A script to collect the version of FireEye currently installed. #
# If FireEye is not installed then "Not Installed" is the result#
##############################################################################
RESULT="Not Installed"

if [ -f "/Library/FireEye/xagt/xagt.app/Contents/Info.plist" ] ; then
    RESULT=$( defaults read /Library/FireEye/xagt/xagt.app/Contents/Info CFBundleVersion )
fi

echo "<result>$RESULT</result>"

Forum|alt.badge.img+4
  • Contributor
  • June 25, 2019

This is exactly what I'm looking for, thank you! Took a while to populate the EA data once implemented but it is slowly but surely capturing the version information.


Forum|alt.badge.img+4
  • Contributor
  • December 4, 2019

Thank you, works like a charm!