API that returns info about CIS IGs and/or banchmarks (CSPM)

[threathunter89]

Hi folks, I am working on the CSPM module. I want to pull data that will help me v API call that would return this information.

The closest I got is get_policy_settings, which returns id, benchmark short, and recommendation number. Is there any other method that can provide what I need?

[crowdstrikedcs]

Hi @threathunter89 thanks for the question!. Could you let us know a bit more detail on the data points you are looking to collect? If there is a page in the Falcon UI where this data exists today that would be helpful to provide.

[threathunter89]

Cloud Security>IOM>Compliance

And when you click on CIS, a separate page opens and it has mappings to IGs (for CIS version 8 and higher)

[threathunter89]

So I am looking for an API that will return details IOMs that include CIS control version and finding (in example v8 3.11) and which IG belongs to (on screenshots Applicable Profiles)