hosts

Get-CsHostId

Search for hosts in your environment

References

Documentation, Swagger

Parameters

-Filter: The filter expression that should be used to limit the results

-Limit: The maximum records to return

-Offset: The offset to page from, for the next result set

-All: Repeat request until all results are returned

Example

PS> Get-CsHostId

Get-CsHostInfo

Get details on one or more hosts by providing agent IDs

References

Documentation, Swagger

Parameters

-Id: The host agent IDs used to get details on

Example

PS> Get-CsHostInfo -Id @(<string>, <string>)

Hide-CsHost

Delete hosts. After a host is deleted, no new detections for that host will be reported in the UI or APIs

References

Documentation, Swagger

Parameters

-Id: An array of one or more agent IDs to hide

Example

PS> Hide-CsHost -Id @(<string>, <string>)

Show-CsHost

Restore hosts. Detection reporting will resume after the host is restored

References

Documentation, Swagger

Parameters

-Id: An array of one or more agent IDs to restore

Example

PS> Show-CsHost -Id @(<string>, <string>)

Start-CsContain

Contain hosts. Stops any network communication to locations other than the CrowdStrike cloud and IPs specified in your containment policy

References

Documentation, Swagger

Parameters

-Id: An array of one or more agent IDs to contain

Example

PS> Start-CsContain -Id @(<string>, <string>)

Stop-CsContain

Lift containment on hosts. Returns network communications to normal

References

Documentation, Swagger

Parameters

-Id: An array of one or more agent IDs to release from containment

Example

PS> Stop-CsContain -Id @(<string>, <string>)