Get FalconCloudRule - CrowdStrike/psfalcon GitHub Wiki

Get-FalconCloudRule

SYNOPSIS

Search for Falcon Cloud Security compliance rules

DESCRIPTION

Requires 'Cloud Security Policies: Read'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id String[] Compliance rule identifier X X
Filter String Falcon Query Language expression to limit results

rule_auto_remediable
rule_compliance_benchmark
rule_compliance_framework
rule_control_requirement
rule_control_section
rule_created_at
rule_description
rule_domain
rule_mitre_tactic
rule_mitre_technique
rule_name
rule_origin
rule_parent_uuid
rule_provider
rule_resource_type
rule_service
rule_severity
rule_short_code
rule_status
rule_subdomain
rule_updated_at
rule_updated_by
Sort String Property and direction to sort results rule_auto_remediable|asc
rule_auto_remediable|desc
rule_compliance_benchmark|asc
rule_compliance_benchmark|desc
rule_compliance_framework|asc
rule_compliance_framework|desc
rule_control_requirement|asc
rule_control_requirement|desc
rule_control_section|asc
rule_control_section|desc
rule_created_at|asc
rule_created_at|desc
rule_description|asc
rule_description|desc
rule_domain|asc
rule_domain|desc
rule_mitre_tactic|asc
rule_mitre_tactic|desc
rule_mitre_technique|asc
rule_mitre_technique|desc
rule_name|asc
rule_name|desc
rule_origin|asc
rule_origin|desc
rule_parent_uuid|asc
rule_parent_uuid|desc
rule_provider|asc
rule_provider|desc
rule_resource_type|asc
rule_resource_type|desc
rule_service|asc
rule_service|desc
rule_severity|asc
rule_severity|desc
rule_short_code|asc
rule_short_code|desc
rule_status|asc
rule_status|desc
rule_subdomain|asc
rule_subdomain|desc
rule_updated_at|asc
rule_updated_at|desc
rule_updated_by|asc
rule_updated_by|desc
Limit Int32 Maximum number of results per request [default: 100] 1 500
Offset Int32 Position to begin retrieving results
Detailed Switch Retrieve detailed information
All Switch Repeat requests until all available results are retrieved
Total Switch Display total result count instead of results

SYNTAX

Get-FalconCloudRule [[-Filter] <String>] [[-Sort] <String>] [[-Limit] <Int32>] [-Offset <Int32>] [-Detailed] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]
Get-FalconCloudRule -Id <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /cloud-policies/entities/rules/v1
GET /cloud-policies/queries/rules/v1

falconpy

QueryRule
GetRule

USAGE

2025-10-24: PSFalcon v2.3.0

⚠️ **GitHub.com Fallback** ⚠️