Creating and executing a PowerShell script-based remedial action

A custom remedial action can be created using a PowerShell script packaged in an Agent Client Collector (ACC) plugin and executed on endpoint devices through a check definition.

The ACC plugin contains the PowerShell script that defines the remedial action using commands and a Ruby script that calls the PowerShell script from the ServiceNow instance. When the signed ACC plugin is uploaded to a ServiceNow instance, the ACC agent downloads the plugin and executes the remedial action through a check definition you create.

Creating and executing a PowerShell script-based custom remedial action includes the following tasks.

1. Creating an ACC plugin package that includes the PowerShell script, Ruby script, and allowlist. For more information, see Create an ACC plugin package.
2. Generating a self-signed certificate, signing the plugin package, and verifying the signature to enable the remedial action to be executed securely on endpoint devices. For more information, see Sign and verify an ACC plugin.
3. Uploading the signed plugin package to the ServiceNow instance. For more information, see Create and edit Agent Client Collector plugins.
4. Creating a check definition and linking it to the ACC plugin to enable the ACC agent to download it and execute the remedial action on the endpoint device. For more information, see Create a check definition for a custom remedial action.
5. Testing the check definition to verify if the ACC plugin is linked and the remedial action runs successfully. For more information, see Test a check definition.

• Create an ACC plugin package
  Create an Agent Client Collector (ACC) plugin package that includes the PowerShell script defining the remedial action, a Ruby script, and an allowlist to enable execution of the remedial action on an endpoint device.
• Sign and verify an ACC plugin
  Create a self-signed certificate for an Agent Client Collector (ACC) plugin and verify the signature to enable validation of the signed plugin on endpoint devices.
• Create a check definition for a custom remedial action
  Create a check definition and link it to the Agent Client Collector (ACC) plugin to enable the ACC agent to run a custom remedial action.
• Test a check definition
  Test a check definition on an endpoint device to verify that the Agent Client Collector (ACC) plugin is linked and the custom remedial action defined in the Powershell script runs successfully.