Systems
Every machine with the Garrison agent. The tiles count systems, agents online, systems with a role, and crown jewels. Filter by status or tag, or search by name, address or tag.
Add system opens the install command: see Linux and Windows.
A system
Section titled “A system”Click a system to open its details:
| Section | |
|---|---|
| Details | Agent status and version, OS, hostname, addresses, hardware |
| Roles | Assigned roles. Assign role proposes one (System roles) |
| Tags | Crown jewel, Hunt target, Scan allowed, Internet facing, Netflow capture, and your own tags |
| Ask Garry | Opens a chat scoped to this system |
Tags that change behaviour
Section titled “Tags that change behaviour”| Tag | Effect |
|---|---|
| Crown jewel | Alerts on this system get a higher priority, and chat will not block its address unless you name it |
| Hunt target | Included when hunts run |
| Scan allowed | Authorized for attack-surface scans |
| Internet facing | Part of the external attack surface |
| Netflow capture | Sends flow records for network hunts |
Terminal
Section titled “Terminal”In Garry, select exactly one online system in the left column and click Terminal in the header: a root shell on that system opens below the conversation. Only the system’s owner can open one, and every session is recorded in the audit log (who, which system, when it opened and closed). Use it with care: what you type in a terminal runs at once, without the approval step.