Get FalconHorizonPolicy - CrowdStrike/psfalcon GitHub Wiki

Get-FalconHorizonPolicy

SYNOPSIS

Retrieve detailed information about Falcon Horizon policies

DESCRIPTION

Requires 'CSPM registration: Read'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id Int32[] Policy identifier X X
PolicyId Int32 Policy identifier
Service String Cloud service type ACM
ACR
Any
App Engine
AppService
BigQuery
Cloud Load Balancing
Cloud Logging
Cloud SQL
Cloud Storage
CloudFormation
CloudTrail
CloudWatch Logs
Cloudfront
Compute Engine
Config
Disk
DynamoDB
EBS
EC2
ECR
EFS
EKS
ELB
EMR
Elasticache
GuardDuty
IAM
Identity
KMS
KeyVault
Kinesis
Kubernetes
Lambda
LoadBalancer
Monitor
NLB/ALB
NetworkSecurityGroup
PostgreSQL
RDS
Redshift
S3
SES
SNS
SQLDatabase
SQLServer
SQS
SSM
Serverless Application Repository
StorageAccount
Subscriptions
VPC
VirtualMachine
VirtualNetwork
CloudPlatform String Cloud platform aws
azure
gcp

SYNTAX

Get-FalconHorizonPolicy [[-PolicyId] <Int32>] [[-Service] <String>] [[-CloudPlatform] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]
Get-FalconHorizonPolicy -Id <Int32[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /settings/entities/policy/v1
GET /settings/entities/policy-details/v2

falconpy

GetCSPMPolicySettings
GetCSPMPoliciesDetails

USAGE

Retrieve a policy

Get-FalconHorizonPolicy -Id <id>, <id>

Retrieving policies by service

Get-FalconHorizonPolicy -Service <service_name> [-Detailed]

2023-04-25: PSFalcon v2.2.5

⚠️ **GitHub.com Fallback** ⚠️