Get FalconMemberCid - CrowdStrike/psfalcon GitHub Wiki

Get-FalconMemberCid

SYNOPSIS

Search for Falcon Flight Control member CIDs

DESCRIPTION

Requires 'Flight Control: Read'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id String[] Member CID identifier X X
Filter String Falcon Query Language expression to limit results
Sort String Property and direction to sort results last_modified_timestamp.asc
last_modified_timestamp.desc
Limit Int32 Maximum number of results per request 1 5000
Offset Int32 Position to begin retrieving results
Detailed Switch Retrieve detailed information
All Switch Repeat requests until all available results are retrieved
Total Switch Display total result count instead of results

SYNTAX

Get-FalconMemberCid [[-Filter] <String>] [[-Sort] <String>] [[-Limit] <Int32>] [-Offset <Int32>] [-Detailed] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]
Get-FalconMemberCid -Id <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /mssp/queries/children/v1
POST /mssp/entities/children/GET/v2

falconpy

queryChildren
getChildrenV2

USAGE

List member CIDs

Get-FalconMemberCid [-Detailed] [-All]

See Authorize and run commands in member CIDs.

2023-11-27: PSFalcon v2.2.6

⚠️ **GitHub.com Fallback** ⚠️