Sensor Download
The Sensor Download service collection provides operations for discovering, querying, and downloading CrowdStrike Falcon sensor installers. Retrieve combined sensor installer details, download installers by SHA256 ID, get installer entities, retrieve the CCID for sensor deployment, and query installer IDs. Multiple versioned endpoints (v1, v2, v3) are available for each operation.
| Language | Last Update |
|---|---|
| Python | v1.6.1 |
| PowerShell | v2.2.9 |
| Go | v0.20.0 |
| TypeScript | v0.6.0 |
| Rust | v0.7.0 |
| Ruby | v1.2.0 |
Table of Contents
Section titled “Table of Contents”| Operation | Description |
|---|---|
GetCombinedSensorInstallersByQueryget_combined_sensor_installers_by_query | Get sensor installer details by provided query |
GetCombinedSensorInstallersByQueryV2get_combined_sensor_installers_by_query_v2 | Get sensor installer details by provided query |
GetCombinedSensorInstallersByQueryV3get_combined_sensor_installers_by_query_v3 | Get sensor installer details by provided query |
DownloadSensorInstallerByIddownload_sensor_installer | Download sensor installer by SHA256 ID |
DownloadSensorInstallerByIdV2download_sensor_installer_v2 | Download sensor installer by SHA256 ID |
DownloadSensorInstallerByIdV3download_sensor_installer_v3 | Download sensor installer by SHA256 ID |
GetSensorInstallersEntitiesget_sensor_installer_entities | Get sensor installer details by provided SHA256 IDs |
GetSensorInstallersEntitiesV2get_sensor_installer_entities_v2 | Get sensor installer details by provided SHA256 IDs |
GetSensorInstallersEntitiesV3get_sensor_installer_entities_v3 | Get sensor installer details by provided SHA256 IDs |
GetSensorInstallersCCIDByQueryget_sensor_installer_ccid | Get CCID to use with sensor installers |
GetSensorInstallersByQueryget_sensor_installers_by_query | Get sensor installer IDs by provided query |
GetSensorInstallersByQueryV2get_sensor_installers_by_query_v2 | Get sensor installer IDs by provided query |
GetSensorInstallersByQueryV3get_sensor_installers_by_query_v3 | Get sensor installer IDs by provided query |
GetCombinedSensorInstallersByQuery
Section titled “GetCombinedSensorInstallersByQuery”Get sensor installer details by provided query
get_combined_sensor_installers_by_queryParameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| limit | query | integer | The number of items to return in this response (default: 100, max: 500). Use with the offset parameter to manage pagination of results. |
| filter | query | string | Filter items using a query in Falcon Query Language (FQL). An asterisk wildcard * includes all results. Common filter options include: platform:“windows”, version:>“5.2” |
| offset | query | integer | The first item to return, where 0 is the latest item. Use with the limit parameter to manage pagination of results. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
| sort | query | string | Sort items using their properties. Common sort options include: version|asc, release_date|desc |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.get_combined_sensor_installers_by_query(filter="string", limit=integer, offset=integer, sort="string")print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.GetCombinedSensorInstallersByQuery(filter="string", limit=integer, offset=integer, sort="string")print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.command("GetCombinedSensorInstallersByQuery", offset=integer, limit=integer, sort="string", filter="string")print(response)Examples coming soon.
package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
offset := int64(0) limit := int64(0) sort := "string" filter := "string"
response, err := client.SensorDownload.GetCombinedSensorInstallersByQuery( &sensor_download.GetCombinedSensorInstallersByQueryParams{ Offset: &offset, Limit: &limit, Sort: &sort, Filter: &filter, Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getCombinedSensorInstallersByQuery( integer, // offset integer, // limit "string", // sort "string" // filter);
console.log(response);use rusty_falcon::apis::sensor_download_api::get_combined_sensor_installers_by_query;use rusty_falcon::easy::client::FalconHandle;
#[tokio::main]async fn main() { let falcon = FalconHandle::from_env().await.expect("Could not authenticate");
let response = get_combined_sensor_installers_by_query( &falcon.cfg, // configuration Some(integer), // offset Some(integer), // limit Some("string"), // sort Some("string"), // filter ).await.expect("API call failed");
println!("{:?}", response);}require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_combined_sensor_installers_by_query(offset: integer, limit: integer, sort: 'string', filter: 'string')
puts responseGetCombinedSensorInstallersByQueryV2
Section titled “GetCombinedSensorInstallersByQueryV2”Get sensor installer details by provided query
get_combined_sensor_installers_by_query_v2Parameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| limit | query | integer | The number of items to return in this response (default: 100, max: 500). Use with the offset parameter to manage pagination of results. |
| filter | query | string | Filter items using a query in Falcon Query Language (FQL). An asterisk wildcard * includes all results. Common filter options include: platform:“windows”, version:>“5.2” |
| offset | query | integer | The first item to return, where 0 is the latest item. Use with the limit parameter to manage pagination of results. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
| sort | query | string | Sort items using their properties. Common sort options include: version|asc, release_date|desc |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.get_combined_sensor_installers_by_query_v2(filter="string", limit=integer, offset=integer, sort="string")print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.GetCombinedSensorInstallersByQueryV2(filter="string", limit=integer, offset=integer, sort="string")print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.command("GetCombinedSensorInstallersByQueryV2", offset=integer, limit=integer, sort="string", filter="string")print(response)Get-FalconInstaller -Filter "string" ` -Sort "string" ` -Limit integer ` -Offset integerpackage main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
offset := int64(0) limit := int64(0) sort := "string" filter := "string"
response, err := client.SensorDownload.GetCombinedSensorInstallersByQueryV2( &sensor_download.GetCombinedSensorInstallersByQueryV2Params{ Offset: &offset, Limit: &limit, Sort: &sort, Filter: &filter, Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getCombinedSensorInstallersByQueryV2( integer, // offset integer, // limit "string", // sort "string" // filter);
console.log(response);use rusty_falcon::apis::sensor_download_api::get_combined_sensor_installers_by_query_v2;use rusty_falcon::easy::client::FalconHandle;
#[tokio::main]async fn main() { let falcon = FalconHandle::from_env().await.expect("Could not authenticate");
let response = get_combined_sensor_installers_by_query_v2( &falcon.cfg, // configuration Some(integer), // offset Some(integer), // limit Some("string"), // sort Some("string"), // filter ).await.expect("API call failed");
println!("{:?}", response);}require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_combined_sensor_installers_by_query_v2(offset: integer, limit: integer, sort: 'string', filter: 'string')
puts responseGetCombinedSensorInstallersByQueryV3
Section titled “GetCombinedSensorInstallersByQueryV3”Get sensor installer details by provided query
get_combined_sensor_installers_by_query_v3Parameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| filter | query | string | Filter items using a query in Falcon Query Language (FQL). An asterisk wildcard * includes all results. Common filter options include: platform:“windows”, version:>“5.2” |
| limit | query | integer | The number of items to return in this response (default: 100, max: 500). Use with the offset parameter to manage pagination of results. |
| offset | query | integer | The first item to return, where 0 is the latest item. Use with the limit parameter to manage pagination of results. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
| sort | query | string | Sort items using their properties. Common sort options include: version|asc, release_date|desc |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.get_combined_sensor_installers_by_query_v3(offset=integer, limit=integer, sort="string", filter="string")print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.GetCombinedSensorInstallersByQueryV3(offset=integer, limit=integer, sort="string", filter="string")print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.command("GetCombinedSensorInstallersByQueryV3", offset=integer, limit=integer, sort="string", filter="string")print(response)Examples coming soon.
package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
offset := int64(0) limit := int64(0) sort := "string" filter := "string"
response, err := client.SensorDownload.GetCombinedSensorInstallersByQueryV3( &sensor_download.GetCombinedSensorInstallersByQueryV3Params{ Offset: &offset, Limit: &limit, Sort: &sort, Filter: &filter, Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getCombinedSensorInstallersByQueryV3( integer, // offset integer, // limit "string", // sort "string" // filter);
console.log(response);Examples coming soon.
require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_combined_sensor_installers_by_query_v3(offset: integer, limit: integer, sort: 'string', filter: 'string')
puts responseDownloadSensorInstallerById
Section titled “DownloadSensorInstallerById”Download sensor installer by SHA256 ID
download_sensor_installerParameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| download_path | query | string | File path to use for the saved file. Must be present to trigger a file download. |
| id | query | string | SHA256 of the installer to download |
| file_name | query | string | File name to use for the saved file. Must be present to trigger a file download. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
| stream | query | boolean | Enable streaming download of the returned file. |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
with open("output_file", "wb") as save_file: response = falcon.download_sensor_installer(download_path="string", id="string", file_name="string", stream=boolean, stream=boolean) save_file.write(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
with open("output_file", "wb") as save_file: response = falcon.DownloadSensorInstallerById(download_path="string", id="string", file_name="string", stream=boolean, stream=boolean) save_file.write(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
with open("output_file", "wb") as save_file: response = falcon.command("DownloadSensorInstallerById", id="string") save_file.write(response)Examples coming soon.
package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
response, err := client.SensorDownload.DownloadSensorInstallerByID( &sensor_download.DownloadSensorInstallerByIDParams{ ID: "string", Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.downloadSensorInstallerById("string"); // id
console.log(response);use rusty_falcon::apis::sensor_download_api::download_sensor_installer_by_id;use rusty_falcon::easy::client::FalconHandle;
#[tokio::main]async fn main() { let falcon = FalconHandle::from_env().await.expect("Could not authenticate");
let response = download_sensor_installer_by_id( &falcon.cfg, // configuration "string", // id ).await.expect("API call failed");
println!("{:?}", response);}require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.download_sensor_installer_by_id('string')
puts responseDownloadSensorInstallerByIdV2
Section titled “DownloadSensorInstallerByIdV2”Download sensor installer by SHA256 ID
download_sensor_installer_v2Parameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| download_path | query | string | File path to use for the saved file. Must be present to trigger a file download. |
| id | query | string | SHA256 of the installer to download |
| file_name | query | string | File name to use for the saved file. Must be present to trigger a file download. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
| stream | query | boolean | Enable streaming download of the returned file. |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
with open("output_file", "wb") as save_file: response = falcon.download_sensor_installer_v2(download_path="string", id="string", file_name="string", stream=boolean, stream=boolean) save_file.write(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
with open("output_file", "wb") as save_file: response = falcon.DownloadSensorInstallerByIdV2(download_path="string", id="string", file_name="string", stream=boolean, stream=boolean) save_file.write(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
with open("output_file", "wb") as save_file: response = falcon.command("DownloadSensorInstallerByIdV2", id="string") save_file.write(response)Receive-FalconInstaller -Path "string" -Id "string"package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
response, err := client.SensorDownload.DownloadSensorInstallerByIDV2( &sensor_download.DownloadSensorInstallerByIDV2Params{ ID: "string", Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.downloadSensorInstallerByIdV2("string"); // id
console.log(response);use rusty_falcon::apis::sensor_download_api::download_sensor_installer_by_id_v2;use rusty_falcon::easy::client::FalconHandle;
#[tokio::main]async fn main() { let falcon = FalconHandle::from_env().await.expect("Could not authenticate");
let response = download_sensor_installer_by_id_v2( &falcon.cfg, // configuration "string", // id ).await.expect("API call failed");
println!("{:?}", response);}require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.download_sensor_installer_by_id_v2('string')
puts responseDownloadSensorInstallerByIdV3
Section titled “DownloadSensorInstallerByIdV3”Download sensor installer by SHA256 ID
download_sensor_installer_v3Parameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| id | query | string | SHA256 of the installer to download. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
with open("output_file", "wb") as save_file: response = falcon.download_sensor_installer_v3(id="string", stream=boolean) save_file.write(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
with open("output_file", "wb") as save_file: response = falcon.DownloadSensorInstallerByIdV3(id="string", stream=boolean) save_file.write(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
with open("output_file", "wb") as save_file: response = falcon.command("DownloadSensorInstallerByIdV3", id="string") save_file.write(response)Examples coming soon.
package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
response, err := client.SensorDownload.DownloadSensorInstallerByIDV3( &sensor_download.DownloadSensorInstallerByIDV3Params{ ID: "string", Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.downloadSensorInstallerByIdV3("string"); // id
console.log(response);Examples coming soon.
require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.download_sensor_installer_by_id_v3('string')
puts responseGetSensorInstallersEntities
Section titled “GetSensorInstallersEntities”Get sensor installer details by provided SHA256 IDs
get_sensor_installer_entitiesParameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| ids | query | string or list of strings | The IDs of the installers to retrieve details for. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.get_sensor_installer_entities(ids=id_list)print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.GetSensorInstallersEntities(ids=id_list)print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("GetSensorInstallersEntities", ids=id_list)print(response)Examples coming soon.
package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
response, err := client.SensorDownload.GetSensorInstallersEntities( &sensor_download.GetSensorInstallersEntitiesParams{ Ids: []string{"ID1", "ID2", "ID3"}, Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getSensorInstallersEntities(["ID1", "ID2", "ID3"]); // ids
console.log(response);use rusty_falcon::apis::sensor_download_api::get_sensor_installers_entities;use rusty_falcon::easy::client::FalconHandle;
#[tokio::main]async fn main() { let falcon = FalconHandle::from_env().await.expect("Could not authenticate");
let response = get_sensor_installers_entities( &falcon.cfg, // configuration vec!["string".to_string()], // ids ).await.expect("API call failed");
println!("{:?}", response);}require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_sensor_installers_entities(['ID1', 'ID2', 'ID3'])
puts responseGetSensorInstallersEntitiesV2
Section titled “GetSensorInstallersEntitiesV2”Get sensor installer details by provided SHA256 IDs
get_sensor_installer_entities_v2Parameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| ids | query | string or list of strings | The IDs of the installers to retrieve details for. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.get_sensor_installer_entities_v2(ids=id_list)print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.GetSensorInstallersEntitiesV2(ids=id_list)print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("GetSensorInstallersEntitiesV2", ids=id_list)print(response)Get-FalconInstaller -Id @("ID1", "ID2")package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
response, err := client.SensorDownload.GetSensorInstallersEntitiesV2( &sensor_download.GetSensorInstallersEntitiesV2Params{ Ids: []string{"ID1", "ID2", "ID3"}, Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getSensorInstallersEntitiesV2(["ID1", "ID2", "ID3"]); // ids
console.log(response);use rusty_falcon::apis::sensor_download_api::get_sensor_installers_entities_v2;use rusty_falcon::easy::client::FalconHandle;
#[tokio::main]async fn main() { let falcon = FalconHandle::from_env().await.expect("Could not authenticate");
let response = get_sensor_installers_entities_v2( &falcon.cfg, // configuration vec!["string".to_string()], // ids ).await.expect("API call failed");
println!("{:?}", response);}require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_sensor_installers_entities_v2(['ID1', 'ID2', 'ID3'])
puts responseGetSensorInstallersEntitiesV3
Section titled “GetSensorInstallersEntitiesV3”Get sensor installer details by provided SHA256 IDs
get_sensor_installer_entities_v3Parameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| ids | query | string or list of strings | The IDs of the installers. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.get_sensor_installer_entities_v3(ids=id_list)print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.GetSensorInstallersEntitiesV3(ids=id_list)print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("GetSensorInstallersEntitiesV3", ids=id_list)print(response)Examples coming soon.
package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
response, err := client.SensorDownload.GetSensorInstallersEntitiesV3( &sensor_download.GetSensorInstallersEntitiesV3Params{ Ids: []string{"ID1", "ID2", "ID3"}, Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getSensorInstallersEntitiesV3(["ID1", "ID2", "ID3"]); // ids
console.log(response);Examples coming soon.
require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_sensor_installers_entities_v3(['ID1', 'ID2', 'ID3'])
puts responseGetSensorInstallersCCIDByQuery
Section titled “GetSensorInstallersCCIDByQuery”Get CCID to use with sensor installers
get_sensor_installer_ccidParameters
Section titled “Parameters”No keywords or arguments accepted.
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.get_sensor_installer_ccid()print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.GetSensorInstallersCCIDByQuery()print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.command("GetSensorInstallersCCIDByQuery")print(response)Get-FalconCcidpackage main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
response, err := client.SensorDownload.GetSensorInstallersCCIDByQuery( &sensor_download.GetSensorInstallersCCIDByQueryParams{ Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getSensorInstallersCCIDByQuery();
console.log(response);use rusty_falcon::apis::sensor_download_api::get_sensor_installers_ccidby_query;use rusty_falcon::easy::client::FalconHandle;
#[tokio::main]async fn main() { let falcon = FalconHandle::from_env().await.expect("Could not authenticate");
let response = get_sensor_installers_ccidby_query(&falcon.cfg).await.expect("API call failed"); // configuration
println!("{:?}", response);}require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_sensor_installers_ccidby_query
puts responseGetSensorInstallersByQuery
Section titled “GetSensorInstallersByQuery”Get sensor installer IDs by provided query
get_sensor_installers_by_queryParameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| filter | query | string | Filter items using a query in Falcon Query Language (FQL). An asterisk wildcard * includes all results. Common filter options include: platform:“windows”, version:>“5.2” |
| limit | query | integer | The number of items to return in this response (default: 100, max: 500). Use with the offset parameter to manage pagination of results. |
| offset | query | integer | The first item to return, where 0 is the latest item. Use with the limit parameter to manage pagination of results. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
| sort | query | string | Sort items using their properties. Common sort options include: version|asc, release_date|desc |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.get_sensor_installers_by_query(filter="string", limit=integer, offset=integer, sort="string")print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.GetSensorInstallersByQuery(filter="string", limit=integer, offset=integer, sort="string")print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.command("GetSensorInstallersByQuery", offset=integer, limit=integer, sort="string", filter="string")print(response)Examples coming soon.
package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
offset := int64(0) limit := int64(0) sort := "string" filter := "string"
response, err := client.SensorDownload.GetSensorInstallersByQuery( &sensor_download.GetSensorInstallersByQueryParams{ Offset: &offset, Limit: &limit, Sort: &sort, Filter: &filter, Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getSensorInstallersByQuery( integer, // offset integer, // limit "string", // sort "string" // filter);
console.log(response);use rusty_falcon::apis::sensor_download_api::get_sensor_installers_by_query;use rusty_falcon::easy::client::FalconHandle;
#[tokio::main]async fn main() { let falcon = FalconHandle::from_env().await.expect("Could not authenticate");
let response = get_sensor_installers_by_query( &falcon.cfg, // configuration Some(integer), // offset Some(integer), // limit Some("string"), // sort Some("string"), // filter ).await.expect("API call failed");
println!("{:?}", response);}require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_sensor_installers_by_query(offset: integer, limit: integer, sort: 'string', filter: 'string')
puts responseGetSensorInstallersByQueryV2
Section titled “GetSensorInstallersByQueryV2”Get sensor installer IDs by provided query
get_sensor_installers_by_query_v2Parameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| filter | query | string | Filter items using a query in Falcon Query Language (FQL). An asterisk wildcard * includes all results. Common filter options include: platform:“windows”, version:>“5.2” |
| limit | query | integer | The number of items to return in this response (default: 100, max: 500). Use with the offset parameter to manage pagination of results. |
| offset | query | integer | The first item to return, where 0 is the latest item. Use with the limit parameter to manage pagination of results. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
| sort | query | string | Sort items using their properties. Common sort options include: version|asc, release_date|desc |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.get_sensor_installers_by_query_v2(filter="string", limit=integer, offset=integer, sort="string")print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.GetSensorInstallersByQueryV2(filter="string", limit=integer, offset=integer, sort="string")print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.command("GetSensorInstallersByQueryV2", offset=integer, limit=integer, sort="string", filter="string")print(response)Get-FalconInstaller -Filter "string" ` -Sort "string" ` -Limit integer ` -Offset integerpackage main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
offset := int64(0) limit := int64(0) sort := "string" filter := "string"
response, err := client.SensorDownload.GetSensorInstallersByQueryV2( &sensor_download.GetSensorInstallersByQueryV2Params{ Offset: &offset, Limit: &limit, Sort: &sort, Filter: &filter, Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getSensorInstallersByQueryV2( integer, // offset integer, // limit "string", // sort "string" // filter);
console.log(response);use rusty_falcon::apis::sensor_download_api::get_sensor_installers_by_query_v2;use rusty_falcon::easy::client::FalconHandle;
#[tokio::main]async fn main() { let falcon = FalconHandle::from_env().await.expect("Could not authenticate");
let response = get_sensor_installers_by_query_v2( &falcon.cfg, // configuration Some(integer), // offset Some(integer), // limit Some("string"), // sort Some("string"), // filter ).await.expect("API call failed");
println!("{:?}", response);}require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_sensor_installers_by_query_v2(offset: integer, limit: integer, sort: 'string', filter: 'string')
puts responseGetSensorInstallersByQueryV3
Section titled “GetSensorInstallersByQueryV3”Get sensor installer IDs by provided query
get_sensor_installers_by_query_v3Parameters
Section titled “Parameters”| Name | Type | Data type | Description |
|---|---|---|---|
| filter | query | string | Filter items using a query in Falcon Query Language (FQL). An asterisk wildcard * includes all results. Common filter options include: platform:“windows”, version:>“5.2” |
| limit | query | integer | The number of items to return in this response (default: 100, max: 500). Use with the offset parameter to manage pagination of results. |
| offset | query | integer | The first item to return, where 0 is the latest item. Use with the limit parameter to manage pagination of results. |
| parameters | query | dictionary | Full query string parameters payload in JSON format. |
| sort | query | string | Sort items using their properties. Common sort options include: version|asc, release_date|desc |
Code Examples
Section titled “Code Examples”from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.get_sensor_installers_by_query_v3(offset=integer, limit=integer, sort="string", filter="string")print(response)from falconpy import SensorDownload
falcon = SensorDownload(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.GetSensorInstallersByQueryV3(offset=integer, limit=integer, sort="string", filter="string")print(response)from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID, client_secret=CLIENT_SECRET )
response = falcon.command("GetSensorInstallersByQueryV3", offset=integer, limit=integer, sort="string", filter="string")print(response)Examples coming soon.
package main
import ( "context" "fmt" "os"
"github.com/crowdstrike/gofalcon/falcon" "github.com/crowdstrike/gofalcon/falcon/client/sensor_download")
func main() { client, err := falcon.NewClient(&falcon.ApiConfig{ ClientId: os.Getenv("FALCON_CLIENT_ID"), ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"), Context: context.Background(), }) if err != nil { panic(err) }
offset := int64(0) limit := int64(0) sort := "string" filter := "string"
response, err := client.SensorDownload.GetSensorInstallersByQueryV3( &sensor_download.GetSensorInstallersByQueryV3Params{ Offset: &offset, Limit: &limit, Sort: &sort, Filter: &filter, Context: context.Background(), }, ) if err != nil { panic(falcon.ErrorExplain(err)) }
fmt.Printf("%+v\n", response.Payload)}import { FalconClient } from "crowdstrike-falcon";
const client = new FalconClient({ cloud: process.env.FALCON_CLOUD!, clientId: process.env.FALCON_CLIENT_ID!, clientSecret: process.env.FALCON_CLIENT_SECRET!,});
const response = await client.sensorDownload.getSensorInstallersByQueryV3( integer, // offset integer, // limit "string", // sort "string" // filter);
console.log(response);Examples coming soon.
require "crimson-falcon"
Falcon.configure do |config| config.client_id = ENV["FALCON_CLIENT_ID"] config.client_secret = ENV["FALCON_CLIENT_SECRET"] config.cloud = ENV["FALCON_CLOUD"]end
api = Falcon::SensorDownload.new
response = api.get_sensor_installers_by_query_v3(offset: integer, limit: integer, sort: 'string', filter: 'string')
puts response