Get FalconCloudIoaUser

Get-FalconCloudIoaUser

SYNOPSIS

Retrieve Falcon Cloud Security Indicator of Attack users

DESCRIPTION

Requires 'CSPM registration: Read'.

PARAMETERS

Name	Type	Description	Min	Max	Allowed	Pipeline	PipelineByName
PolicyId	Int32	Policy identifier					X
CloudPlatform	String	Cloud platform			aws azure gcp
AwsAccountId	String	AWS account identifier					X
AzureSubscriptionId	String	Azure subscription identifier					X
AzureTenantId	String	Azure tenant identifier					X
State	String	Event state

SYNTAX

Get-FalconCloudIoaUser [-PolicyId] <Int32> [[-CloudPlatform] <String>] [[-AwsAccountId] <String>] [[-AzureSubscriptionId] <String>] [[-AzureTenantId] <String>] [[-State] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /ioa/entities/users/v1

USAGE

2024-09-03: PSFalcon v2.2.7