Skip to content

Zero Trust Assessment

Joshua Hiller edited this page Aug 30, 2021 · 22 revisions

CrowdStrike Falcon Twitter URL

Using the Zero Trust Assessment service collection

Uber class support Service class support

Table of Contents

Operation ID Description
getAssessmentV1
PEP8 get_assessment
Get Zero Trust Assessment data for one or more hosts by providing agent IDs (AID) and a customer ID (CID).
getComplianceV1
PEP8 get_compliance
Get the Zero Trust Assessment compliance report for one customer ID (CID).

getAssessmentV1

Get Zero Trust Assessment data for one or more hosts by providing agent IDs (AID) and a customer ID (CID).

PEP8 method name

get_assessment

Content-Type

  • Consumes: application/json
  • Produces: application/json

Parameters

Required Name Type Datatype Description
ids query array (string) One or more agent IDs, which you can find in the data.zta file, or the Falcon console.

Usage

Service class example (PEP8 syntax)
from falconpy.zero_trust_assessment import ZeroTrustAssessment

falcon = ZeroTrustAssessment(client_id="API_CLIENT_ID_HERE",
                             client_secret="API_CLIENT_SECRET_HERE"
                             )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_assessment(ids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy.zero_trust_assessment import ZeroTrustAssessment

falcon = ZeroTrustAssessment(client_id="API_CLIENT_ID_HERE",
                             client_secret="API_CLIENT_SECRET_HERE"
                             )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.getAssessmentV1(ids=id_list)
print(response)
Uber class example
from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("getAssessmentV1", ids=id_list)
print(response)

getComplianceV1

Get the Zero Trust Assessment compliance report for one customer ID (CID).

PEP8 method name

get_compliance

Content-Type

  • Consumes: application/json
  • Produces: application/json

Parameters

No parameters

Usage

Service class example (PEP8 syntax)
from falconpy.zero_trust_assessment import ZeroTrustAssessment

falcon = ZeroTrustAssessment(client_id="API_CLIENT_ID_HERE",
                             client_secret="API_CLIENT_SECRET_HERE"
                             )

response = falcon.get_compliance()
print(response)
Service class example (Operation ID syntax)
from falconpy.zero_trust_assessment import ZeroTrustAssessment

falcon = ZeroTrustAssessment(client_id="API_CLIENT_ID_HERE",
                             client_secret="API_CLIENT_SECRET_HERE"
                             )

response = falcon.getComplianceV1()
print(response)
Uber class example
from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

response = falcon.command("getComplianceV1")
print(response)

CrowdStrike Falcon

Clone this wiki locally