Skip to content

Detection and Prevention Policies

Jump to bottom
bk-cs edited this page Apr 29, 2023 · 12 revisions

CrowdStrike Falcon API DocumentationEU 1US-1US-2US-GOV-1

Command Permission
Compare-FalconPreventionPhase prevention-policies:read
Copy-FalconPreventionPolicy prevention-policies:readprevention-policies:write
Edit-FalconIoaExclusion self-service-ioa-exclusions:write
Edit-FalconIoaGroup custom-ioa:write
Edit-FalconIoaRule custom-ioa:write
Edit-FalconIoc ioc:write
Edit-FalconMlExclusion ml-exclusions:write
Edit-FalconPreventionPolicy prevention-policies:write
Edit-FalconSvExclusion sensor-visibility-exclusions:write
Get-FalconIoaExclusion self-service-ioa-exclusions:read
Get-FalconIoaGroup custom-ioa:read
Get-FalconIoaPlatform custom-ioa:read
Get-FalconIoaRule custom-ioa:read
Get-FalconIoaSeverity custom-ioa:read
Get-FalconIoaType custom-ioa:read
Get-FalconIoc ioc:read
Get-FalconIocAction ioc:read
Get-FalconIocPlatform ioc:read
Get-FalconIocSeverity ioc:read
Get-FalconIocType ioc:read
Get-FalconMlExclusion ml-exclusions:read
Get-FalconPreventionPolicy prevention-policies:read
Get-FalconPreventionPolicyMember prevention-policies:read
Get-FalconSvExclusion sensor-visibility-exclusions:read
Invoke-FalconPreventionPolicyAction prevention-policies:write
New-FalconIoaExclusion self-service-ioa-exclusions:write
New-FalconIoaGroup custom-ioa:write
New-FalconIoaRule custom-ioa:write
New-FalconIoc ioc:write
Get-FalconIocHost iocs:read
Get-FalconIocProcess iocs:read
New-FalconMlExclusion ml-exclusions:write
New-FalconPreventionPolicy prevention-policies:write
New-FalconSvExclusion sensor-visibility-exclusions:write
Remove-FalconIoaExclusion self-service-ioa-exclusions:write
Remove-FalconIoaGroup custom-ioa:write
Remove-FalconIoaRule custom-ioa:write
Remove-FalconIoc ioc:write
Remove-FalconMlExclusion ml-exclusions:write
Remove-FalconPreventionPolicy prevention-policies:write
Remove-FalconSvExclusion sensor-visibility-exclusions:write
Set-FalconPreventionPrecedence prevention-policies:write
Test-FalconIoaRule custom-ioa:write

Clone this wiki locally