Get FalconReport - CrowdStrike/psfalcon GitHub Wiki

Get-FalconReport

SYNOPSIS

Search for Falcon Intelligence Sandbox reports

DESCRIPTION

Requires 'Sandbox (Falcon Intelligence): Read'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id String[] Report identifier X X
Filter String Falcon Query Language expression to limit results
Sort String Property and direction to sort results
Limit Int32 Maximum number of results per request 1 5000
Offset Int32 Position to begin retrieving results
Summary Switch Return a summary version
Detailed Switch Retrieve detailed information
All Switch Repeat requests until all available results are retrieved
Total Switch Display total result count instead of results

SYNTAX

Get-FalconReport [[-Filter] <String>] [[-Sort] <String>] [[-Limit] <Int32>] [-Offset <Int32>] [-Detailed] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]
Get-FalconReport -Id <String[]> -Summary [-WhatIf] [-Confirm] [<CommonParameters>]
Get-FalconReport -Id <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /falconx/entities/report-summaries/v1
GET /falconx/entities/reports/v1
GET /falconx/queries/reports/v1

falconpy

QueryReports
GetSummaryReports
GetReports

USAGE

View a sandbox report

Get-FalconReport -Id <id>, <id>

View a summary-level sandbox report

Get-FalconReport -Id <id>, <id> -Summary

See New-FalconSubmission.

2024-09-03: PSFalcon v2.2.7

⚠️ **GitHub.com Fallback** ⚠️