Get FalconIdentityRule - CrowdStrike/psfalcon GitHub Wiki

Get-FalconIdentityRule

SYNOPSIS

Search for Falcon Identity Protection policy rules

DESCRIPTION

Requires 'Identity Protection Policy Rules: Read'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id String[] Falcon Identity Protection policy rule identifier X X
Name String Filter by rule name
Enabled Boolean Filter by rule enablement status
SimulationMode Boolean Filter by simulation mode
Detailed Switch Retrieve detailed information

SYNTAX

Get-FalconIdentityRule [[-Name] <String>] [[-Enabled] <Boolean>] [[-SimulationMode] <Boolean>] [-Detailed] [-WhatIf] [-Confirm] [<CommonParameters>]
Get-FalconIdentityRule -Id <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /identity-protection/entities/policy-rules/v1
GET /identity-protection/queries/policy-rules/v1

falconpy

api_preempt_proxy_get_policy_rules_query
api_preempt_proxy_get_policy_rules

USAGE

2024-12-19: PSFalcon v2.2.8

⚠️ **GitHub.com Fallback** ⚠️