New FalconDpePolicy - CrowdStrike/psfalcon GitHub Wiki

New-FalconDataProtectionPolicy

SYNOPSIS

Create a Falcon Data Protection policy

DESCRIPTION

Requires 'Data Protection: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
InputObject Object[] One or more policies to create in a request X
PlatformName String Operating system win
mac
Name String Policy name
Description String Policy description
Precedence Int32 Policy precedence
PolicyProperties Object Object containing policy properties ('enable_content_inspection', 'enable_context_inspection', etc.)

SYNTAX

New-FalconDataProtectionPolicy [-PlatformName] <String> [-Name] <String> [-Description] <String> [[-Precedence] <Int32>] [[-PolicyProperties] <Object>] [-WhatIf] [-Confirm] [<CommonParameters>]
New-FalconDataProtectionPolicy -InputObject <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

POST /data-protection/entities/policies/v2

USAGE

Create a policy

$Property = @{
  enable_content_inspection = $true
  enable_context_inspection = $true
  min_confidence_level = 'medium'
  inspection_depth = 'balanced'
  browsers_without_active_extension = 'block_policy'
  block_all_data_access = $true
  unsupported_browsers_action = 'allow'
  similarity_detection = $false
  similarity_threshold = '80'
  enable_clipboard_inspection = $false
  enable_end_user_notifications_unsupported_browser = $false
  allow_notifications = 'default'
  block_notifications = 'default'
  custom_allow_notification = $null
  custom_block_notification = $null
  evidence_download_enabled = $false
  evidence_duplication_enabled_default = $true
  evidence_encrypted_enabled = $false
  classifications = @{ add = @('id') }
  be_exclude_domains = ''
  be_splash_enabled = $true
  be_splash_message_source = 'default'
  be_splash_custom_message = ''
  be_upload_timeout_duration_seconds = 40
  be_upload_timeout_response = 'allow'
  be_paste_timeout_duration_milliseconds = 800
  be_paste_timeout_response = 'allow'
  be_paste_clipboard_min_size = 32
  be_paste_clipboard_min_size_unit = 'Bytes'
  be_paste_clipboard_max_size = 0.0625
  be_paste_clipboard_max_size_unit = 'KiB'
  be_paste_clipboard_over_size_behaviour_block = $false
  evidence_storage_free_disk_perc = 2
  evidence_storage_max_size = 1
  max_file_size_to_inspect = 10.48576
  max_file_size_to_inspect_unit = 'MB'
}
New-FalconDataProtectionPolicy -Name 'My External API Policy' -PlatformName win -Description 'My External API Policy description' -Precedence 1 -PolicyProperties $Property

2025-10-24: PSFalcon v2.3.0

⚠️ **GitHub.com Fallback** ⚠️