Guarded Host Discovery

Microsoft.Windows.GuardedFabric.10.0.Discovery.ComputerRole.GuardedHost (Discovery)

Script based discovery for Guarded Hosts

Knowledge Base article:

Summary

Powershell based discovery for machines in the Guarded Host role.

Element properties:

TargetMicrosoft.Windows.Computer
EnabledTrue
Frequency28800
RemotableFalse

Object Discovery Details:

Discovered Classes and their attribuets:

Member Modules:

ID Module Type TypeId RunAs 
DiscoveryDS DataSource Microsoft.Windows.GuardedFabric.10.0.DataSource.DiscoverGuardedHost Default

Source Code:

<Discovery ID="Microsoft.Windows.GuardedFabric.10.0.Discovery.ComputerRole.GuardedHost" Target="Windows!Microsoft.Windows.Computer" Enabled="true" ConfirmDelivery="false" Remotable="false" Priority="Normal">
<Category>Discovery</Category>
<DiscoveryTypes>
<DiscoveryClass TypeID="Microsoft.Windows.GuardedFabric.10.0.ComputerRole.GuardedHost">
<Property TypeID="Microsoft.Windows.GuardedFabric.10.0.ComputerRole.GuardedHost" PropertyID="Mode"/>
<Property TypeID="Microsoft.Windows.GuardedFabric.10.0.ComputerRole.GuardedHost" PropertyID="AttestationOperationMode"/>
<Property TypeID="Microsoft.Windows.GuardedFabric.10.0.ComputerRole.GuardedHost" PropertyID="AttestationURL"/>
<Property TypeID="Microsoft.Windows.GuardedFabric.10.0.ComputerRole.GuardedHost" PropertyID="KeyProtectionURL"/>
<Property TypeID="Windows!Microsoft.Windows.Computer" PropertyID="PrincipalName"/>
<Property TypeID="System!System.Entity" PropertyID="DisplayName"/>
</DiscoveryClass>
<DiscoveryClass TypeID="Microsoft.Windows.GuardedFabric.10.0.ComputerRole">
<Property TypeID="Windows!Microsoft.Windows.Computer" PropertyID="PrincipalName"/>
<Property TypeID="System!System.Entity" PropertyID="DisplayName"/>
</DiscoveryClass>
</DiscoveryTypes>
<DataSource ID="DiscoveryDS" TypeID="Microsoft.Windows.GuardedFabric.10.0.DataSource.DiscoverGuardedHost">
<IntervalSeconds>28800</IntervalSeconds>
<TimeoutSeconds>600</TimeoutSeconds>
<ComputerPrincipalName>$Target/Property[Type='Windows!Microsoft.Windows.Computer']/PrincipalName$</ComputerPrincipalName>
</DataSource>
</Discovery>