VMWare vSphere

Version: 1.4
Updated: Sep 19, 2023

Utilize and manipulate virtual machines during an incident investigation with VMWare vSphere.

Actions

• Get Events (Enrichment) - Gather events from vSphere.
• Get Snapshots (Enrichment) - Get VM snapshots.
• Get VMs (Enrichment) - Get list of available virtual machine.
• Create Snapshot (Containment) - Create a new snapshot.
• Hard Reboot (Containment) - Execute a hard reboot of a system.
• Power Off (Containment) - Power off a system.
• Power On (Containment) - Power on a system.
• Revert To Snapshot (Containment) - Roll back to a previous snapshot.
• Soft Reboot (Containment) - Execute a soft reboot of a system.
• Suspend (Containment) - Suspend a virtual machine.

External libraries

• VMWare vSphere

Minimum permissions required

The following permissions are required for the integration:

• Read-Only. Allows reading details of virtual machines in the vSphere inventory.
• For further details on how to create the role, see vSphere Permissions and User Management Tasks.
• For the HOST, use the IP or Domain of the vSphere node.
• The port should be set to 443.

Change Log

• August 30, 2019 - First upload
• September 6, 2019 - Added link to VMWare vSphere external library
• August 17, 2023 (v1.2) - Updated the integration with Environmental Variables
• September 4, 2023 (v1.3) - Fixed a bug where if the timeout was not specified, an error would occur
• September 19, 2023 (v1.4) - Versioning