-
Notifications
You must be signed in to change notification settings - Fork 71
New FalconPreventionPolicy
bk-cs edited this page Sep 3, 2024
·
21 revisions
Create Prevention policies
Requires 'Prevention Policies: Write'.
Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
---|---|---|---|---|---|---|---|
InputObject | Object[] | One or more policies to create in a single request | X | ||||
Name | String | Policy name | |||||
PlatformName | String | Operating system platform |
Windows Mac Linux iOS Android
|
||||
Description | String | Policy description | |||||
Setting | Object[] | An array of policy settings |
New-FalconPreventionPolicy [-Name] <String> [-PlatformName] <String> [[-Description] <String>] [[-Setting] <Object[]>] [-WhatIf] [-Confirm] [<CommonParameters>]
New-FalconPreventionPolicy -InputObject <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]
POST /policy/entities/prevention/v1
$Setting = @(
@{
id = 'AdditionalUserModeData'
value = @{ enabled = $true }
},
@{
id = 'EndUserNotifications'
value = @{ enabled = $true }
},
@{
id = 'CloudAntiMalware'
value = @{ detection = 'MODERATE'; prevention = 'MODERATE' }
}
)
New-FalconPreventionPolicy -PlatformName Windows -Name 'Demo Policy' -Description 'This is a demo policy' -Setting $Setting
2024-09-03: PSFalcon v2.2.7
- Using PSFalcon
-
Commands and Permissions
- Configuration Import/Export
- Container Security
- Detection and Prevention Policies
- Discover for Cloud and Containers
- Discover
- Event Streams
- Falcon Complete Dashboards
- Falcon Complete Message Center
- Falcon Data Replicator
- Falcon Intelligence
- Falcon Intelligence Recon
- Falcon OverWatch Dashboards
- Falcon Sandbox
- FileVantage
- Firewall Management
- Flight Control
- Horizon
- Host and Host Group Management
- Identity Protection
- Image Assessment
- Incident and Detection Monitoring
- Installation Tokens
- Kubernetes Protection
- MalQuery
- Mobile Host Enrollment
- On-Demand Scanning
- Quarantine
- Real-time Response
- Real-time Response Policy
- Scheduled Reports and Searches
- Sensor Download
- Sensor Update Policy
- Spotlight
- Tailored Intelligence
- Third-party ingestion
- USB Device Control Policy
- Users and Roles
- Zero Trust Assessment
- Examples
-
CrowdStrike SDKs
- PSFalcon - PowerShell
- FalconPy - Python 3
- goFalcon - Go
- Rusty Falcon - Rust