Install EDR agent with reboot warning

Download JSON Download Python

Ratings

(0)

Release Time

01/23/2019

Downloads

1476 times

Update Time

04/18/2025

Views

1704 times

Share-it:

Tags

reboot EDR

Description
Screen Shots

This script will install the EDR agent and warn about the system reboot

Procedure's Instructions

#
### PARAMETERS TO BE EDITED UNDER PARAMETERS TAB ###
#
#1.Enter_the_URL:
# TYPE: String
# ITSM LABEL: Any name
# Default value: "Enter your URL"
#
#2.Enter_the_filename
# TYPE: String
# ITSM LABEL: Any name
# Default value: "Enter your filename"
#
#3.Enter the Extension
# TYPE: String
# ITSM LABEL: Any name
# Default value: "Enter the Extension". For Eg: .exe
#
## Please download COMODO EDR agent (.EXE) file and Upload it in your Host Environment Drive.

URL=itsm.getParameter('Enter_the_URL') # Enter the URL
FileName=itsm.getParameter('Enter_the_filename') # Give your FileName as it is in Drive and ensure downloaded filename and Uploaded filename has not changed.
Extension=itsm.getParameter('Enter_the_extension') # ENter the extension. For Eg: ".exe"
import urllib

fn = FileName+Extension
a = 0
import os
import ctypes
from subprocess import PIPE, Popen
import subprocess
import shutil,time
import ssl
import re
import time
import sys
try:
    import urllib.request as urllib2
except ImportError:
    try:
        import urllib2
    except ImportError:
        pass

class disable_file_system_redirection:
    _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
    _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
    def __enter__(self):
        self.old_value = ctypes.c_long()
        self.success = self._disable(ctypes.byref(self.old_value))
    def __exit__(self, type, value, traceback):
        if self.success:
            self._revert(self.old_value)

context = ssl._create_unverified_context()

def ecmd(command, output=False):
    class disable_file_system_redirection:
        _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
        _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
        def __enter__(self):
            self.old_value = ctypes.c_long()
            self.success = self._disable(ctypes.byref(self.old_value))
        def __exit__(self, type, value, traceback):
            if self.success:
                self._revert(self.old_value)
    with disable_file_system_redirection():
        objt = Popen(command, shell = True, stdout = PIPE, stderr = PIPE)
        out, err = objt.communicate()
        ret=objt.returncode
    if not out:
        return ret
    else:
        return '%s\n%s'%(out, err)

def check():
    with disable_file_system_redirection():
        inst=os.popen("wmic product get name,identifyingnumber").read()
    return inst
        
def Download(URL,fileName):
    import os
    print ("Download has started.")
    src_path=os.environ['ProgramData']
    fp = os.path.join(src_path, fileName)
    request = urllib2.Request(URL, headers={'User-Agent' : "Magic Browser"})
    parsed = urllib2.urlopen(request)
    if not os.path.exists(src_path):
        os.makedirs(src_path)
    with open(fp, 'wb') as f:
        while True:
            chunk=parsed.read(100*1000*1000)
            if chunk:
                f.write(chunk)
            else:
                break
    print ("The file was successfully downloaded in the specified path: "+fp+".")
    try:
        print('Installation started for Application %s '%fileName)
        dr=os.popen(fp+' /quiet').read()
        print (dr)
    except:
        print ('File: '+fp+' does not exist.')

inst=check()
if len(inst)>0:
	find=re.findall('{.*}\s\sCOMODO\scWatch\sEDR\sAgent',inst)
	if len(find)>0:
		final=re.findall('{.*}',find[0])[0]
		if len(final) >0:
			a=1
if a ==1:
    print ("COMODO cWatch EDR Agent  is installed on the Endpoint. No action required.")
else:
    print ("COMODO cWatch EDR Agent is not installed on the Endpoint.")
    Download(URL,fn)
    a=0
    inst=check()
    if len(inst)>0:
        find=re.findall('{.*}\s\sCOMODO\scWatch\sEDR\sAgent',inst)
        if len(find)>0:
            final=re.findall('{.*}',find[0])[0]
            if len(final) >0:
                a=1
    if a ==1:
        print ("COMODO cWatch EDR Agent  is installed on the Endpoint.")
        print ('The system will reboot in 30 min.Please save and close all currently opened documents and programs.')
        print (ecmd(r'shutdown.exe -r -t 300 /f /c "The system will reboot in 5 min.Please save and close all currently opened documents and programs."', True))    
    else:
        print ("COMODO cWatch EDR Agent is not installed on the Endpoint.")

Comments

No Comments.

Install EDR agent with reboot warning

Comments

Leave a Comment