Get FalconCloudAsset - CrowdStrike/psfalcon GitHub Wiki

Get-FalconCloudAsset

SYNOPSIS

Search for Falcon Cloud Security assets

DESCRIPTION

Requires 'Cloud Security API Assets: Read'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id String[] Asset identifier X X
Filter String Falcon Query Language expression to limit results
Sort String Property and direction to sort results account_id|asc
account_id|desc
account_name|asc
account_name|desc
active|asc
active|desc
cloud_provider|asc
cloud_provider|desc
cluster_id|asc
cluster_id|desc
cluster_name|asc
cluster_name|desc
creation_time|asc
creation_time|desc
data_classifications.found|asc
data_classifications.found|desc
data_classifications.scanned|asc
data_classifications.scanned|desc
first_seen|asc
first_seen|desc
id|asc
id|desc
instance_id|asc
instance_id|desc
instance_state|asc
instance_state|desc
ioa_count|asc
ioa_count|desc
iom_count|asc
iom_count|desc
managed_by|asc
managed_by|desc
organization_Id|asc
organization_Id|desc
os_version|asc
os_version|desc
platform_name|asc
platform_name|desc
publicly_exposed|asc
publicly_exposed|desc
region|asc
region|desc
resource_id|asc
resource_id|desc
resource_name|asc
resource_name|desc
resource_type|asc
resource_type|desc
resource_type_name|asc
resource_type_name|desc
service|asc
service|desc
ssm_managed|asc
ssm_managed|desc
status|asc
status|desc
tenant_id|asc
tenant_id|desc
updated_at|asc
updated_at|desc
vmware.guest_os_id|asc
vmware.guest_os_id|desc
vmware.guest_os_version|asc
vmware.guest_os_version|desc
vmware.host_system_name|asc
vmware.host_system_name|desc
vmware.host_type|asc
vmware.host_type|desc
vmware.instance_uuid|asc
vmware.instance_uuid|desc
vmware.vm_host_name|asc
vmware.vm_host_name|desc
vmware.vm_tools_status|asc
vmware.vm_tools_status|desc
zone|asc
zone|desc
Limit Int32 Maximum number of results per request [default: 500] 1 1000
Offset String Position to begin retrieving results
After String Pagination token to retrieve the next set of results
Detailed Switch Retrieve detailed information
All Switch Repeat requests until all available results are retrieved
Total Switch Display total result count instead of results

SYNTAX

Get-FalconCloudAsset [[-Filter] <String>] [[-Sort] <String>] [[-Limit] <Int32>] [-Offset <String>] [-After <String>] [-Detailed] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]
Get-FalconCloudAsset [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /cloud-security-assets/entities/resources/v1
GET /cloud-security-assets/queries/resources/v1

falconpy

cloud_security_assets_queries
cloud_security_assets_entities_get

USAGE

2025-08-05: PSFalcon v2.2.9

⚠️ **GitHub.com Fallback** ⚠️