Views:

Use the available remote shell commands to investigate Linux endpoints.

Note
Note
When specifying a file location, be aware that UNC paths are not supported.
Command
Description
Syntax
Example
Supported on
bashhistory
List command/bash history (/root/.bash_history)
bashhistory
bashhistory
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
cat
Output the specified content of the selected file (max size 1MB)
cat [--offset <offset> <size>] [--hex] <file_location_and_extension>
Note
Note
For the <file_location_and_extension>, specify the absolute or relative path to the file, the file name, and the file extension.
Important
Important
The following optional parameters are only available on endpoints with the XDR Endpoint Sentor.
  • --offset: Optional parameter to specify the start location in the file (in bytes)
  • --size: Optional parameter to specify the size of the output from the start location (in bytes).
  • --hex: Optional parameter to output binary file content in hexadecimal format.
  • To output the content of the example.txt file located in the current directory (/root/Downloads):
    Downloads>cat example.txt
  • To output the content of the example.txt file located in the /root/temp directory:
    Downloads>cat /root/temp/example.txt
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
cd
Change the current working directory
cd <path>
Note
Note
For the <path>, specify the absolute or relative path.
cd /root
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
clear
Clear screen
clear
clear
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
env
List environment variables
env
env
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
fileinfo
List detailed file properties
fileinfo <file_location_and_extension>
  • To list the file properties of the example.txt file located in the current directory (/root/Downloads):
    Downloads>fileinfo example.txt
  • To list the file properties of the example.txt file located in the /root/temp directory:
    Downloads>fileinfo /root/temp/example.txt
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
get
Collect a specific file and upload to Trend Vision One
Maximum file size: 4 GB
get <file_location_and_extension>
  • To collect the file example.txt file in the current directory /Users/admin/Downloads :
    Downloads>get example.txt
  • To collect the file example.txt file located in the /tmp directory:
    Downloads>get /tmp/example.txt
  • XDR Endpoint Sensor
group list
List local group information
group list
group list
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
help
Display help information
help
help
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
ipconfig
Display network configuration information
ipconfig
ipconfig
  • XDR Endpoint Sensor
kill
Terminate a running process
kill <PID>
kill 1234
  • XDR Endpoint Sensor
listenports
List listening ports
listenports
listenports
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
ls
List contents of the directory
ls [-a] [-l] [path]
  • -a: Optional parameter that includes entries starting with .
  • -l: Optional parameter that displays output in long list format
Note
Note
For the <path>, specify the absolute or relative path.
ls
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
netstat
List network statistics and active connections
netstat
netstat
  • XDR Endpoint Sensor
ps
List running process information
ps
ps
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
pwd
Display current directory
pwd
pwd
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
run
Execute a previously uploaded script
run <script_name_and_extension> [arguments]
run demo.sh 1 "22 33" 44
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
scheduletasks
List scheduled tasks
scheduletasks
scheduletasks
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
service list
List service information
service list
service list
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
systeminfo
List system information
systeminfo
systeminfo
  • XDR Endpoint Sensor
taskstatus
List status of response tasks created in the current session
taskstatus [--id=<task_id>]
<task_id>: Optional parameter to specify the identifier of the response task.
taskstatus [--id=RM-20241207-00025]
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)
user info
List account properties
user info <username>
Note
Note
<username> supports the use of the UID (for example, "0" for the root account).
user info john_doe
  • XDR Endpoint Sensor
user list
List local user accounts
user list
user list
  • XDR Endpoint Sensor
  • Deep Security Agent (managed by Trend Cloud One - Endpoint & Workload Security)