rtr_script

This data source provides information about a single Real Time Response (RTR) custom script in CrowdStrike Falcon. Use this to look up an RTR script by name or ID and reference its attributes.

API Scopes

The following API scopes are required:

• Real Time Response (Admin): READ

Example Usage

terraform {
  required_providers {
    crowdstrike = {
      source = "registry.terraform.io/crowdstrike/crowdstrike"
    }
  }
}

provider "crowdstrike" {
  cloud = "us-2"
}

# Look up an RTR script by name
data "crowdstrike_rtr_script" "by_name" {
  name = "my-rtr-script"
}

# Look up an RTR script by ID
data "crowdstrike_rtr_script" "by_id" {
  id = "dbe9c1fabd024fafaf44adf4df5f0f0f"
}

output "rtr_script_content" {
  value = data.crowdstrike_rtr_script.by_name.content
}

Schema

Optional

• id (String) The ID of the RTR script. Exactly one of id or name must be provided.
• name (String) The name of the RTR script. Exactly one of id or name must be provided.

Read-Only

• comments_for_audit_log (String) Audit log comment for the script.
• content (String) The script content.
• created_by (String) The user who created the script.
• created_timestamp (String) The timestamp when the script was created.
• description (String) The description of the RTR script.
• modified_by (String) The user who last modified the script.
• modified_timestamp (String) The timestamp when the script was last modified.
• permission_type (String) Who can use the script: private, group, or public.
• platform_name (String) The platform the script targets (Windows, Mac, or Linux).
• sha256 (String) The SHA-256 hash of the script content.
• size (Number) The file size of the script in bytes.