Get FalconOverWatchIncident

Get-FalconOverWatchIncident

Retrieve the total number of Falcon OverWatch incidents across all customers

Requires 'OverWatch Dashboard: Read'.

Name	Type	Description	Min	Max	Allowed	Pipeline	PipelineByName
Filter	String	Falcon Query Language expression to limit results

Get-FalconOverWatchIncident [-Filter] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

GET /overwatch-dashboards/aggregates/incidents-global-counts/v1

Get-FalconOverWatchIncident -Filter "detect_time:>'now-48h'"

2023-04-25: PSFalcon v2.2.5

Using PSFalcon
Commands and Permissions
Examples
- Code Examples
- Samples
CrowdStrike SDKs
- PSFalcon - PowerShell
- FalconPy - Python 3
- goFalcon - Go
- Rusty Falcon - Rust