crowdstrike

package
v0.0.0-...-384aed8 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Sep 2, 2025 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Overview

A Pulumi package for creating and managing CrowdStrike resources

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type CloudAwsAccount

type CloudAwsAccount struct {
	pulumi.CustomResourceState

	// The AWS Account ID
	AccountId pulumi.StringOutput `pulumi:"accountId"`
	// The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
	AccountType    pulumi.StringOutput                 `pulumi:"accountType"`
	AssetInventory CloudAwsAccountAssetInventoryOutput `pulumi:"assetInventory"`
	// The name of the CloudTrail S3 bucket used for real-time visibility
	CloudtrailBucketName pulumi.StringOutput       `pulumi:"cloudtrailBucketName"`
	DeploymentMethod     pulumi.StringOutput       `pulumi:"deploymentMethod"`
	Dspm                 CloudAwsAccountDspmOutput `pulumi:"dspm"`
	// The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
	DspmRoleArn pulumi.StringOutput `pulumi:"dspmRoleArn"`
	// The name of the IAM role to be used by CrowdStrike Data Security Posture Management
	DspmRoleName pulumi.StringOutput `pulumi:"dspmRoleName"`
	// The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
	EventbusArn pulumi.StringOutput `pulumi:"eventbusArn"`
	// The name of the Amazon EventBridge used by CrowdStrike to forward messages
	EventbusName pulumi.StringOutput `pulumi:"eventbusName"`
	// The external ID used to assume the AWS IAM role
	ExternalId pulumi.StringOutput `pulumi:"externalId"`
	// The ARN of the AWS IAM role used to access this AWS account
	IamRoleArn pulumi.StringOutput `pulumi:"iamRoleArn"`
	// The name of the AWS IAM role used to access this AWS account
	IamRoleName pulumi.StringOutput      `pulumi:"iamRoleName"`
	Idp         CloudAwsAccountIdpOutput `pulumi:"idp"`
	// The ARN of the intermediate role used to assume the AWS IAM role
	IntermediateRoleArn pulumi.StringOutput `pulumi:"intermediateRoleArn"`
	// Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
	IsOrganizationManagementAccount pulumi.BoolOutput `pulumi:"isOrganizationManagementAccount"`
	// The AWS Organization ID (starts with `o-`). When specified, accounts within the organization will be registered. If `targetOus` is empty, all accounts in the organization will be registered. The `accountId` must be the organization's management account ID.
	OrganizationId     pulumi.StringOutput                     `pulumi:"organizationId"`
	RealtimeVisibility CloudAwsAccountRealtimeVisibilityOutput `pulumi:"realtimeVisibility"`
	SensorManagement   CloudAwsAccountSensorManagementOutput   `pulumi:"sensorManagement"`
	// The list of target Organizational Units
	TargetOuses pulumi.StringArrayOutput `pulumi:"targetOuses"`
}

This resource allows management of an AWS account in Falcon.

## API Scopes

The following API scopes are required:

- Cloud security AWS registration | Read & Write - CSPM registration | Read & Write

## Import

A previously registered cloud aws account can be imported by account id.

```sh $ pulumi import crowdstrike:index/cloudAwsAccount:CloudAwsAccount account 12345678910 ```

func GetCloudAwsAccount

func GetCloudAwsAccount(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CloudAwsAccountState, opts ...pulumi.ResourceOption) (*CloudAwsAccount, error)

GetCloudAwsAccount gets an existing CloudAwsAccount resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCloudAwsAccount

func NewCloudAwsAccount(ctx *pulumi.Context,
	name string, args *CloudAwsAccountArgs, opts ...pulumi.ResourceOption) (*CloudAwsAccount, error)

NewCloudAwsAccount registers a new resource with the given unique name, arguments, and options.

func (*CloudAwsAccount) ElementType

func (*CloudAwsAccount) ElementType() reflect.Type

func (*CloudAwsAccount) ToCloudAwsAccountOutput

func (i *CloudAwsAccount) ToCloudAwsAccountOutput() CloudAwsAccountOutput

func (*CloudAwsAccount) ToCloudAwsAccountOutputWithContext

func (i *CloudAwsAccount) ToCloudAwsAccountOutputWithContext(ctx context.Context) CloudAwsAccountOutput

type CloudAwsAccountArgs

type CloudAwsAccountArgs struct {
	// The AWS Account ID
	AccountId pulumi.StringInput
	// The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
	AccountType      pulumi.StringPtrInput
	AssetInventory   CloudAwsAccountAssetInventoryPtrInput
	DeploymentMethod pulumi.StringPtrInput
	Dspm             CloudAwsAccountDspmPtrInput
	Idp              CloudAwsAccountIdpPtrInput
	// The AWS Organization ID (starts with `o-`). When specified, accounts within the organization will be registered. If `targetOus` is empty, all accounts in the organization will be registered. The `accountId` must be the organization's management account ID.
	OrganizationId     pulumi.StringPtrInput
	RealtimeVisibility CloudAwsAccountRealtimeVisibilityPtrInput
	SensorManagement   CloudAwsAccountSensorManagementPtrInput
	// The list of target Organizational Units
	TargetOuses pulumi.StringArrayInput
}

The set of arguments for constructing a CloudAwsAccount resource.

func (CloudAwsAccountArgs) ElementType

func (CloudAwsAccountArgs) ElementType() reflect.Type

type CloudAwsAccountArray

type CloudAwsAccountArray []CloudAwsAccountInput

func (CloudAwsAccountArray) ElementType

func (CloudAwsAccountArray) ElementType() reflect.Type

func (CloudAwsAccountArray) ToCloudAwsAccountArrayOutput

func (i CloudAwsAccountArray) ToCloudAwsAccountArrayOutput() CloudAwsAccountArrayOutput

func (CloudAwsAccountArray) ToCloudAwsAccountArrayOutputWithContext

func (i CloudAwsAccountArray) ToCloudAwsAccountArrayOutputWithContext(ctx context.Context) CloudAwsAccountArrayOutput

type CloudAwsAccountArrayInput

type CloudAwsAccountArrayInput interface {
	pulumi.Input

	ToCloudAwsAccountArrayOutput() CloudAwsAccountArrayOutput
	ToCloudAwsAccountArrayOutputWithContext(context.Context) CloudAwsAccountArrayOutput
}

CloudAwsAccountArrayInput is an input type that accepts CloudAwsAccountArray and CloudAwsAccountArrayOutput values. You can construct a concrete instance of `CloudAwsAccountArrayInput` via:

CloudAwsAccountArray{ CloudAwsAccountArgs{...} }

type CloudAwsAccountArrayOutput

type CloudAwsAccountArrayOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountArrayOutput) ElementType

func (CloudAwsAccountArrayOutput) ElementType() reflect.Type

func (CloudAwsAccountArrayOutput) Index

func (CloudAwsAccountArrayOutput) ToCloudAwsAccountArrayOutput

func (o CloudAwsAccountArrayOutput) ToCloudAwsAccountArrayOutput() CloudAwsAccountArrayOutput

func (CloudAwsAccountArrayOutput) ToCloudAwsAccountArrayOutputWithContext

func (o CloudAwsAccountArrayOutput) ToCloudAwsAccountArrayOutputWithContext(ctx context.Context) CloudAwsAccountArrayOutput

type CloudAwsAccountAssetInventory

type CloudAwsAccountAssetInventory struct {
	// Enable asset inventory
	Enabled bool `pulumi:"enabled"`
	// Custom AWS IAM role name
	RoleName *string `pulumi:"roleName"`
}

type CloudAwsAccountAssetInventoryArgs

type CloudAwsAccountAssetInventoryArgs struct {
	// Enable asset inventory
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// Custom AWS IAM role name
	RoleName pulumi.StringPtrInput `pulumi:"roleName"`
}

func (CloudAwsAccountAssetInventoryArgs) ElementType

func (CloudAwsAccountAssetInventoryArgs) ToCloudAwsAccountAssetInventoryOutput

func (i CloudAwsAccountAssetInventoryArgs) ToCloudAwsAccountAssetInventoryOutput() CloudAwsAccountAssetInventoryOutput

func (CloudAwsAccountAssetInventoryArgs) ToCloudAwsAccountAssetInventoryOutputWithContext

func (i CloudAwsAccountAssetInventoryArgs) ToCloudAwsAccountAssetInventoryOutputWithContext(ctx context.Context) CloudAwsAccountAssetInventoryOutput

func (CloudAwsAccountAssetInventoryArgs) ToCloudAwsAccountAssetInventoryPtrOutput

func (i CloudAwsAccountAssetInventoryArgs) ToCloudAwsAccountAssetInventoryPtrOutput() CloudAwsAccountAssetInventoryPtrOutput

func (CloudAwsAccountAssetInventoryArgs) ToCloudAwsAccountAssetInventoryPtrOutputWithContext

func (i CloudAwsAccountAssetInventoryArgs) ToCloudAwsAccountAssetInventoryPtrOutputWithContext(ctx context.Context) CloudAwsAccountAssetInventoryPtrOutput

type CloudAwsAccountAssetInventoryInput

type CloudAwsAccountAssetInventoryInput interface {
	pulumi.Input

	ToCloudAwsAccountAssetInventoryOutput() CloudAwsAccountAssetInventoryOutput
	ToCloudAwsAccountAssetInventoryOutputWithContext(context.Context) CloudAwsAccountAssetInventoryOutput
}

CloudAwsAccountAssetInventoryInput is an input type that accepts CloudAwsAccountAssetInventoryArgs and CloudAwsAccountAssetInventoryOutput values. You can construct a concrete instance of `CloudAwsAccountAssetInventoryInput` via:

CloudAwsAccountAssetInventoryArgs{...}

type CloudAwsAccountAssetInventoryOutput

type CloudAwsAccountAssetInventoryOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountAssetInventoryOutput) ElementType

func (CloudAwsAccountAssetInventoryOutput) Enabled

Enable asset inventory

func (CloudAwsAccountAssetInventoryOutput) RoleName

Custom AWS IAM role name

func (CloudAwsAccountAssetInventoryOutput) ToCloudAwsAccountAssetInventoryOutput

func (o CloudAwsAccountAssetInventoryOutput) ToCloudAwsAccountAssetInventoryOutput() CloudAwsAccountAssetInventoryOutput

func (CloudAwsAccountAssetInventoryOutput) ToCloudAwsAccountAssetInventoryOutputWithContext

func (o CloudAwsAccountAssetInventoryOutput) ToCloudAwsAccountAssetInventoryOutputWithContext(ctx context.Context) CloudAwsAccountAssetInventoryOutput

func (CloudAwsAccountAssetInventoryOutput) ToCloudAwsAccountAssetInventoryPtrOutput

func (o CloudAwsAccountAssetInventoryOutput) ToCloudAwsAccountAssetInventoryPtrOutput() CloudAwsAccountAssetInventoryPtrOutput

func (CloudAwsAccountAssetInventoryOutput) ToCloudAwsAccountAssetInventoryPtrOutputWithContext

func (o CloudAwsAccountAssetInventoryOutput) ToCloudAwsAccountAssetInventoryPtrOutputWithContext(ctx context.Context) CloudAwsAccountAssetInventoryPtrOutput

type CloudAwsAccountAssetInventoryPtrInput

type CloudAwsAccountAssetInventoryPtrInput interface {
	pulumi.Input

	ToCloudAwsAccountAssetInventoryPtrOutput() CloudAwsAccountAssetInventoryPtrOutput
	ToCloudAwsAccountAssetInventoryPtrOutputWithContext(context.Context) CloudAwsAccountAssetInventoryPtrOutput
}

CloudAwsAccountAssetInventoryPtrInput is an input type that accepts CloudAwsAccountAssetInventoryArgs, CloudAwsAccountAssetInventoryPtr and CloudAwsAccountAssetInventoryPtrOutput values. You can construct a concrete instance of `CloudAwsAccountAssetInventoryPtrInput` via:

        CloudAwsAccountAssetInventoryArgs{...}

or:

        nil

type CloudAwsAccountAssetInventoryPtrOutput

type CloudAwsAccountAssetInventoryPtrOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountAssetInventoryPtrOutput) Elem

func (CloudAwsAccountAssetInventoryPtrOutput) ElementType

func (CloudAwsAccountAssetInventoryPtrOutput) Enabled

Enable asset inventory

func (CloudAwsAccountAssetInventoryPtrOutput) RoleName

Custom AWS IAM role name

func (CloudAwsAccountAssetInventoryPtrOutput) ToCloudAwsAccountAssetInventoryPtrOutput

func (o CloudAwsAccountAssetInventoryPtrOutput) ToCloudAwsAccountAssetInventoryPtrOutput() CloudAwsAccountAssetInventoryPtrOutput

func (CloudAwsAccountAssetInventoryPtrOutput) ToCloudAwsAccountAssetInventoryPtrOutputWithContext

func (o CloudAwsAccountAssetInventoryPtrOutput) ToCloudAwsAccountAssetInventoryPtrOutputWithContext(ctx context.Context) CloudAwsAccountAssetInventoryPtrOutput

type CloudAwsAccountDspm

type CloudAwsAccountDspm struct {
	// Enable Data Security Posture Management
	Enabled bool `pulumi:"enabled"`
	// Custom AWS IAM role name for Data Security Posture Management
	RoleName *string `pulumi:"roleName"`
}

type CloudAwsAccountDspmArgs

type CloudAwsAccountDspmArgs struct {
	// Enable Data Security Posture Management
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// Custom AWS IAM role name for Data Security Posture Management
	RoleName pulumi.StringPtrInput `pulumi:"roleName"`
}

func (CloudAwsAccountDspmArgs) ElementType

func (CloudAwsAccountDspmArgs) ElementType() reflect.Type

func (CloudAwsAccountDspmArgs) ToCloudAwsAccountDspmOutput

func (i CloudAwsAccountDspmArgs) ToCloudAwsAccountDspmOutput() CloudAwsAccountDspmOutput

func (CloudAwsAccountDspmArgs) ToCloudAwsAccountDspmOutputWithContext

func (i CloudAwsAccountDspmArgs) ToCloudAwsAccountDspmOutputWithContext(ctx context.Context) CloudAwsAccountDspmOutput

func (CloudAwsAccountDspmArgs) ToCloudAwsAccountDspmPtrOutput

func (i CloudAwsAccountDspmArgs) ToCloudAwsAccountDspmPtrOutput() CloudAwsAccountDspmPtrOutput

func (CloudAwsAccountDspmArgs) ToCloudAwsAccountDspmPtrOutputWithContext

func (i CloudAwsAccountDspmArgs) ToCloudAwsAccountDspmPtrOutputWithContext(ctx context.Context) CloudAwsAccountDspmPtrOutput

type CloudAwsAccountDspmInput

type CloudAwsAccountDspmInput interface {
	pulumi.Input

	ToCloudAwsAccountDspmOutput() CloudAwsAccountDspmOutput
	ToCloudAwsAccountDspmOutputWithContext(context.Context) CloudAwsAccountDspmOutput
}

CloudAwsAccountDspmInput is an input type that accepts CloudAwsAccountDspmArgs and CloudAwsAccountDspmOutput values. You can construct a concrete instance of `CloudAwsAccountDspmInput` via:

CloudAwsAccountDspmArgs{...}

type CloudAwsAccountDspmOutput

type CloudAwsAccountDspmOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountDspmOutput) ElementType

func (CloudAwsAccountDspmOutput) ElementType() reflect.Type

func (CloudAwsAccountDspmOutput) Enabled

Enable Data Security Posture Management

func (CloudAwsAccountDspmOutput) RoleName

Custom AWS IAM role name for Data Security Posture Management

func (CloudAwsAccountDspmOutput) ToCloudAwsAccountDspmOutput

func (o CloudAwsAccountDspmOutput) ToCloudAwsAccountDspmOutput() CloudAwsAccountDspmOutput

func (CloudAwsAccountDspmOutput) ToCloudAwsAccountDspmOutputWithContext

func (o CloudAwsAccountDspmOutput) ToCloudAwsAccountDspmOutputWithContext(ctx context.Context) CloudAwsAccountDspmOutput

func (CloudAwsAccountDspmOutput) ToCloudAwsAccountDspmPtrOutput

func (o CloudAwsAccountDspmOutput) ToCloudAwsAccountDspmPtrOutput() CloudAwsAccountDspmPtrOutput

func (CloudAwsAccountDspmOutput) ToCloudAwsAccountDspmPtrOutputWithContext

func (o CloudAwsAccountDspmOutput) ToCloudAwsAccountDspmPtrOutputWithContext(ctx context.Context) CloudAwsAccountDspmPtrOutput

type CloudAwsAccountDspmPtrInput

type CloudAwsAccountDspmPtrInput interface {
	pulumi.Input

	ToCloudAwsAccountDspmPtrOutput() CloudAwsAccountDspmPtrOutput
	ToCloudAwsAccountDspmPtrOutputWithContext(context.Context) CloudAwsAccountDspmPtrOutput
}

CloudAwsAccountDspmPtrInput is an input type that accepts CloudAwsAccountDspmArgs, CloudAwsAccountDspmPtr and CloudAwsAccountDspmPtrOutput values. You can construct a concrete instance of `CloudAwsAccountDspmPtrInput` via:

        CloudAwsAccountDspmArgs{...}

or:

        nil

type CloudAwsAccountDspmPtrOutput

type CloudAwsAccountDspmPtrOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountDspmPtrOutput) Elem

func (CloudAwsAccountDspmPtrOutput) ElementType

func (CloudAwsAccountDspmPtrOutput) Enabled

Enable Data Security Posture Management

func (CloudAwsAccountDspmPtrOutput) RoleName

Custom AWS IAM role name for Data Security Posture Management

func (CloudAwsAccountDspmPtrOutput) ToCloudAwsAccountDspmPtrOutput

func (o CloudAwsAccountDspmPtrOutput) ToCloudAwsAccountDspmPtrOutput() CloudAwsAccountDspmPtrOutput

func (CloudAwsAccountDspmPtrOutput) ToCloudAwsAccountDspmPtrOutputWithContext

func (o CloudAwsAccountDspmPtrOutput) ToCloudAwsAccountDspmPtrOutputWithContext(ctx context.Context) CloudAwsAccountDspmPtrOutput

type CloudAwsAccountIdp

type CloudAwsAccountIdp struct {
	// Enable Identity Protection
	Enabled bool `pulumi:"enabled"`
	// Current status of the Identity Protection integration
	Status *string `pulumi:"status"`
}

type CloudAwsAccountIdpArgs

type CloudAwsAccountIdpArgs struct {
	// Enable Identity Protection
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// Current status of the Identity Protection integration
	Status pulumi.StringPtrInput `pulumi:"status"`
}

func (CloudAwsAccountIdpArgs) ElementType

func (CloudAwsAccountIdpArgs) ElementType() reflect.Type

func (CloudAwsAccountIdpArgs) ToCloudAwsAccountIdpOutput

func (i CloudAwsAccountIdpArgs) ToCloudAwsAccountIdpOutput() CloudAwsAccountIdpOutput

func (CloudAwsAccountIdpArgs) ToCloudAwsAccountIdpOutputWithContext

func (i CloudAwsAccountIdpArgs) ToCloudAwsAccountIdpOutputWithContext(ctx context.Context) CloudAwsAccountIdpOutput

func (CloudAwsAccountIdpArgs) ToCloudAwsAccountIdpPtrOutput

func (i CloudAwsAccountIdpArgs) ToCloudAwsAccountIdpPtrOutput() CloudAwsAccountIdpPtrOutput

func (CloudAwsAccountIdpArgs) ToCloudAwsAccountIdpPtrOutputWithContext

func (i CloudAwsAccountIdpArgs) ToCloudAwsAccountIdpPtrOutputWithContext(ctx context.Context) CloudAwsAccountIdpPtrOutput

type CloudAwsAccountIdpInput

type CloudAwsAccountIdpInput interface {
	pulumi.Input

	ToCloudAwsAccountIdpOutput() CloudAwsAccountIdpOutput
	ToCloudAwsAccountIdpOutputWithContext(context.Context) CloudAwsAccountIdpOutput
}

CloudAwsAccountIdpInput is an input type that accepts CloudAwsAccountIdpArgs and CloudAwsAccountIdpOutput values. You can construct a concrete instance of `CloudAwsAccountIdpInput` via:

CloudAwsAccountIdpArgs{...}

type CloudAwsAccountIdpOutput

type CloudAwsAccountIdpOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountIdpOutput) ElementType

func (CloudAwsAccountIdpOutput) ElementType() reflect.Type

func (CloudAwsAccountIdpOutput) Enabled

Enable Identity Protection

func (CloudAwsAccountIdpOutput) Status

Current status of the Identity Protection integration

func (CloudAwsAccountIdpOutput) ToCloudAwsAccountIdpOutput

func (o CloudAwsAccountIdpOutput) ToCloudAwsAccountIdpOutput() CloudAwsAccountIdpOutput

func (CloudAwsAccountIdpOutput) ToCloudAwsAccountIdpOutputWithContext

func (o CloudAwsAccountIdpOutput) ToCloudAwsAccountIdpOutputWithContext(ctx context.Context) CloudAwsAccountIdpOutput

func (CloudAwsAccountIdpOutput) ToCloudAwsAccountIdpPtrOutput

func (o CloudAwsAccountIdpOutput) ToCloudAwsAccountIdpPtrOutput() CloudAwsAccountIdpPtrOutput

func (CloudAwsAccountIdpOutput) ToCloudAwsAccountIdpPtrOutputWithContext

func (o CloudAwsAccountIdpOutput) ToCloudAwsAccountIdpPtrOutputWithContext(ctx context.Context) CloudAwsAccountIdpPtrOutput

type CloudAwsAccountIdpPtrInput

type CloudAwsAccountIdpPtrInput interface {
	pulumi.Input

	ToCloudAwsAccountIdpPtrOutput() CloudAwsAccountIdpPtrOutput
	ToCloudAwsAccountIdpPtrOutputWithContext(context.Context) CloudAwsAccountIdpPtrOutput
}

CloudAwsAccountIdpPtrInput is an input type that accepts CloudAwsAccountIdpArgs, CloudAwsAccountIdpPtr and CloudAwsAccountIdpPtrOutput values. You can construct a concrete instance of `CloudAwsAccountIdpPtrInput` via:

        CloudAwsAccountIdpArgs{...}

or:

        nil

type CloudAwsAccountIdpPtrOutput

type CloudAwsAccountIdpPtrOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountIdpPtrOutput) Elem

func (CloudAwsAccountIdpPtrOutput) ElementType

func (CloudAwsAccountIdpPtrOutput) Enabled

Enable Identity Protection

func (CloudAwsAccountIdpPtrOutput) Status

Current status of the Identity Protection integration

func (CloudAwsAccountIdpPtrOutput) ToCloudAwsAccountIdpPtrOutput

func (o CloudAwsAccountIdpPtrOutput) ToCloudAwsAccountIdpPtrOutput() CloudAwsAccountIdpPtrOutput

func (CloudAwsAccountIdpPtrOutput) ToCloudAwsAccountIdpPtrOutputWithContext

func (o CloudAwsAccountIdpPtrOutput) ToCloudAwsAccountIdpPtrOutputWithContext(ctx context.Context) CloudAwsAccountIdpPtrOutput

type CloudAwsAccountInput

type CloudAwsAccountInput interface {
	pulumi.Input

	ToCloudAwsAccountOutput() CloudAwsAccountOutput
	ToCloudAwsAccountOutputWithContext(ctx context.Context) CloudAwsAccountOutput
}

type CloudAwsAccountMap

type CloudAwsAccountMap map[string]CloudAwsAccountInput

func (CloudAwsAccountMap) ElementType

func (CloudAwsAccountMap) ElementType() reflect.Type

func (CloudAwsAccountMap) ToCloudAwsAccountMapOutput

func (i CloudAwsAccountMap) ToCloudAwsAccountMapOutput() CloudAwsAccountMapOutput

func (CloudAwsAccountMap) ToCloudAwsAccountMapOutputWithContext

func (i CloudAwsAccountMap) ToCloudAwsAccountMapOutputWithContext(ctx context.Context) CloudAwsAccountMapOutput

type CloudAwsAccountMapInput

type CloudAwsAccountMapInput interface {
	pulumi.Input

	ToCloudAwsAccountMapOutput() CloudAwsAccountMapOutput
	ToCloudAwsAccountMapOutputWithContext(context.Context) CloudAwsAccountMapOutput
}

CloudAwsAccountMapInput is an input type that accepts CloudAwsAccountMap and CloudAwsAccountMapOutput values. You can construct a concrete instance of `CloudAwsAccountMapInput` via:

CloudAwsAccountMap{ "key": CloudAwsAccountArgs{...} }

type CloudAwsAccountMapOutput

type CloudAwsAccountMapOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountMapOutput) ElementType

func (CloudAwsAccountMapOutput) ElementType() reflect.Type

func (CloudAwsAccountMapOutput) MapIndex

func (CloudAwsAccountMapOutput) ToCloudAwsAccountMapOutput

func (o CloudAwsAccountMapOutput) ToCloudAwsAccountMapOutput() CloudAwsAccountMapOutput

func (CloudAwsAccountMapOutput) ToCloudAwsAccountMapOutputWithContext

func (o CloudAwsAccountMapOutput) ToCloudAwsAccountMapOutputWithContext(ctx context.Context) CloudAwsAccountMapOutput

type CloudAwsAccountOutput

type CloudAwsAccountOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountOutput) AccountId

The AWS Account ID

func (CloudAwsAccountOutput) AccountType

func (o CloudAwsAccountOutput) AccountType() pulumi.StringOutput

The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type

func (CloudAwsAccountOutput) AssetInventory

func (CloudAwsAccountOutput) CloudtrailBucketName

func (o CloudAwsAccountOutput) CloudtrailBucketName() pulumi.StringOutput

The name of the CloudTrail S3 bucket used for real-time visibility

func (CloudAwsAccountOutput) DeploymentMethod

func (o CloudAwsAccountOutput) DeploymentMethod() pulumi.StringOutput

func (CloudAwsAccountOutput) Dspm

func (CloudAwsAccountOutput) DspmRoleArn

func (o CloudAwsAccountOutput) DspmRoleArn() pulumi.StringOutput

The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management

func (CloudAwsAccountOutput) DspmRoleName

func (o CloudAwsAccountOutput) DspmRoleName() pulumi.StringOutput

The name of the IAM role to be used by CrowdStrike Data Security Posture Management

func (CloudAwsAccountOutput) ElementType

func (CloudAwsAccountOutput) ElementType() reflect.Type

func (CloudAwsAccountOutput) EventbusArn

func (o CloudAwsAccountOutput) EventbusArn() pulumi.StringOutput

The ARN of the Amazon EventBridge used by CrowdStrike to forward messages

func (CloudAwsAccountOutput) EventbusName

func (o CloudAwsAccountOutput) EventbusName() pulumi.StringOutput

The name of the Amazon EventBridge used by CrowdStrike to forward messages

func (CloudAwsAccountOutput) ExternalId

func (o CloudAwsAccountOutput) ExternalId() pulumi.StringOutput

The external ID used to assume the AWS IAM role

func (CloudAwsAccountOutput) IamRoleArn

func (o CloudAwsAccountOutput) IamRoleArn() pulumi.StringOutput

The ARN of the AWS IAM role used to access this AWS account

func (CloudAwsAccountOutput) IamRoleName

func (o CloudAwsAccountOutput) IamRoleName() pulumi.StringOutput

The name of the AWS IAM role used to access this AWS account

func (CloudAwsAccountOutput) Idp

func (CloudAwsAccountOutput) IntermediateRoleArn

func (o CloudAwsAccountOutput) IntermediateRoleArn() pulumi.StringOutput

The ARN of the intermediate role used to assume the AWS IAM role

func (CloudAwsAccountOutput) IsOrganizationManagementAccount

func (o CloudAwsAccountOutput) IsOrganizationManagementAccount() pulumi.BoolOutput

Indicates whether this is the management account (formerly known as the root account) of an AWS Organization

func (CloudAwsAccountOutput) OrganizationId

func (o CloudAwsAccountOutput) OrganizationId() pulumi.StringOutput

The AWS Organization ID (starts with `o-`). When specified, accounts within the organization will be registered. If `targetOus` is empty, all accounts in the organization will be registered. The `accountId` must be the organization's management account ID.

func (CloudAwsAccountOutput) RealtimeVisibility

func (CloudAwsAccountOutput) SensorManagement

func (CloudAwsAccountOutput) TargetOuses

The list of target Organizational Units

func (CloudAwsAccountOutput) ToCloudAwsAccountOutput

func (o CloudAwsAccountOutput) ToCloudAwsAccountOutput() CloudAwsAccountOutput

func (CloudAwsAccountOutput) ToCloudAwsAccountOutputWithContext

func (o CloudAwsAccountOutput) ToCloudAwsAccountOutputWithContext(ctx context.Context) CloudAwsAccountOutput

type CloudAwsAccountRealtimeVisibility

type CloudAwsAccountRealtimeVisibility struct {
	// The AWS region of the CloudTrail bucket
	CloudtrailRegion string `pulumi:"cloudtrailRegion"`
	// Enable real-time visibility and detection
	Enabled bool `pulumi:"enabled"`
	// Set to true if a CloudTrail already exists
	UseExistingCloudtrail *bool `pulumi:"useExistingCloudtrail"`
}

type CloudAwsAccountRealtimeVisibilityArgs

type CloudAwsAccountRealtimeVisibilityArgs struct {
	// The AWS region of the CloudTrail bucket
	CloudtrailRegion pulumi.StringInput `pulumi:"cloudtrailRegion"`
	// Enable real-time visibility and detection
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// Set to true if a CloudTrail already exists
	UseExistingCloudtrail pulumi.BoolPtrInput `pulumi:"useExistingCloudtrail"`
}

func (CloudAwsAccountRealtimeVisibilityArgs) ElementType

func (CloudAwsAccountRealtimeVisibilityArgs) ToCloudAwsAccountRealtimeVisibilityOutput

func (i CloudAwsAccountRealtimeVisibilityArgs) ToCloudAwsAccountRealtimeVisibilityOutput() CloudAwsAccountRealtimeVisibilityOutput

func (CloudAwsAccountRealtimeVisibilityArgs) ToCloudAwsAccountRealtimeVisibilityOutputWithContext

func (i CloudAwsAccountRealtimeVisibilityArgs) ToCloudAwsAccountRealtimeVisibilityOutputWithContext(ctx context.Context) CloudAwsAccountRealtimeVisibilityOutput

func (CloudAwsAccountRealtimeVisibilityArgs) ToCloudAwsAccountRealtimeVisibilityPtrOutput

func (i CloudAwsAccountRealtimeVisibilityArgs) ToCloudAwsAccountRealtimeVisibilityPtrOutput() CloudAwsAccountRealtimeVisibilityPtrOutput

func (CloudAwsAccountRealtimeVisibilityArgs) ToCloudAwsAccountRealtimeVisibilityPtrOutputWithContext

func (i CloudAwsAccountRealtimeVisibilityArgs) ToCloudAwsAccountRealtimeVisibilityPtrOutputWithContext(ctx context.Context) CloudAwsAccountRealtimeVisibilityPtrOutput

type CloudAwsAccountRealtimeVisibilityInput

type CloudAwsAccountRealtimeVisibilityInput interface {
	pulumi.Input

	ToCloudAwsAccountRealtimeVisibilityOutput() CloudAwsAccountRealtimeVisibilityOutput
	ToCloudAwsAccountRealtimeVisibilityOutputWithContext(context.Context) CloudAwsAccountRealtimeVisibilityOutput
}

CloudAwsAccountRealtimeVisibilityInput is an input type that accepts CloudAwsAccountRealtimeVisibilityArgs and CloudAwsAccountRealtimeVisibilityOutput values. You can construct a concrete instance of `CloudAwsAccountRealtimeVisibilityInput` via:

CloudAwsAccountRealtimeVisibilityArgs{...}

type CloudAwsAccountRealtimeVisibilityOutput

type CloudAwsAccountRealtimeVisibilityOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountRealtimeVisibilityOutput) CloudtrailRegion

The AWS region of the CloudTrail bucket

func (CloudAwsAccountRealtimeVisibilityOutput) ElementType

func (CloudAwsAccountRealtimeVisibilityOutput) Enabled

Enable real-time visibility and detection

func (CloudAwsAccountRealtimeVisibilityOutput) ToCloudAwsAccountRealtimeVisibilityOutput

func (o CloudAwsAccountRealtimeVisibilityOutput) ToCloudAwsAccountRealtimeVisibilityOutput() CloudAwsAccountRealtimeVisibilityOutput

func (CloudAwsAccountRealtimeVisibilityOutput) ToCloudAwsAccountRealtimeVisibilityOutputWithContext

func (o CloudAwsAccountRealtimeVisibilityOutput) ToCloudAwsAccountRealtimeVisibilityOutputWithContext(ctx context.Context) CloudAwsAccountRealtimeVisibilityOutput

func (CloudAwsAccountRealtimeVisibilityOutput) ToCloudAwsAccountRealtimeVisibilityPtrOutput

func (o CloudAwsAccountRealtimeVisibilityOutput) ToCloudAwsAccountRealtimeVisibilityPtrOutput() CloudAwsAccountRealtimeVisibilityPtrOutput

func (CloudAwsAccountRealtimeVisibilityOutput) ToCloudAwsAccountRealtimeVisibilityPtrOutputWithContext

func (o CloudAwsAccountRealtimeVisibilityOutput) ToCloudAwsAccountRealtimeVisibilityPtrOutputWithContext(ctx context.Context) CloudAwsAccountRealtimeVisibilityPtrOutput

func (CloudAwsAccountRealtimeVisibilityOutput) UseExistingCloudtrail

Set to true if a CloudTrail already exists

type CloudAwsAccountRealtimeVisibilityPtrInput

type CloudAwsAccountRealtimeVisibilityPtrInput interface {
	pulumi.Input

	ToCloudAwsAccountRealtimeVisibilityPtrOutput() CloudAwsAccountRealtimeVisibilityPtrOutput
	ToCloudAwsAccountRealtimeVisibilityPtrOutputWithContext(context.Context) CloudAwsAccountRealtimeVisibilityPtrOutput
}

CloudAwsAccountRealtimeVisibilityPtrInput is an input type that accepts CloudAwsAccountRealtimeVisibilityArgs, CloudAwsAccountRealtimeVisibilityPtr and CloudAwsAccountRealtimeVisibilityPtrOutput values. You can construct a concrete instance of `CloudAwsAccountRealtimeVisibilityPtrInput` via:

        CloudAwsAccountRealtimeVisibilityArgs{...}

or:

        nil

type CloudAwsAccountRealtimeVisibilityPtrOutput

type CloudAwsAccountRealtimeVisibilityPtrOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountRealtimeVisibilityPtrOutput) CloudtrailRegion

The AWS region of the CloudTrail bucket

func (CloudAwsAccountRealtimeVisibilityPtrOutput) Elem

func (CloudAwsAccountRealtimeVisibilityPtrOutput) ElementType

func (CloudAwsAccountRealtimeVisibilityPtrOutput) Enabled

Enable real-time visibility and detection

func (CloudAwsAccountRealtimeVisibilityPtrOutput) ToCloudAwsAccountRealtimeVisibilityPtrOutput

func (o CloudAwsAccountRealtimeVisibilityPtrOutput) ToCloudAwsAccountRealtimeVisibilityPtrOutput() CloudAwsAccountRealtimeVisibilityPtrOutput

func (CloudAwsAccountRealtimeVisibilityPtrOutput) ToCloudAwsAccountRealtimeVisibilityPtrOutputWithContext

func (o CloudAwsAccountRealtimeVisibilityPtrOutput) ToCloudAwsAccountRealtimeVisibilityPtrOutputWithContext(ctx context.Context) CloudAwsAccountRealtimeVisibilityPtrOutput

func (CloudAwsAccountRealtimeVisibilityPtrOutput) UseExistingCloudtrail

Set to true if a CloudTrail already exists

type CloudAwsAccountSensorManagement

type CloudAwsAccountSensorManagement struct {
	// Enable 1-click sensor deployment
	Enabled bool `pulumi:"enabled"`
}

type CloudAwsAccountSensorManagementArgs

type CloudAwsAccountSensorManagementArgs struct {
	// Enable 1-click sensor deployment
	Enabled pulumi.BoolInput `pulumi:"enabled"`
}

func (CloudAwsAccountSensorManagementArgs) ElementType

func (CloudAwsAccountSensorManagementArgs) ToCloudAwsAccountSensorManagementOutput

func (i CloudAwsAccountSensorManagementArgs) ToCloudAwsAccountSensorManagementOutput() CloudAwsAccountSensorManagementOutput

func (CloudAwsAccountSensorManagementArgs) ToCloudAwsAccountSensorManagementOutputWithContext

func (i CloudAwsAccountSensorManagementArgs) ToCloudAwsAccountSensorManagementOutputWithContext(ctx context.Context) CloudAwsAccountSensorManagementOutput

func (CloudAwsAccountSensorManagementArgs) ToCloudAwsAccountSensorManagementPtrOutput

func (i CloudAwsAccountSensorManagementArgs) ToCloudAwsAccountSensorManagementPtrOutput() CloudAwsAccountSensorManagementPtrOutput

func (CloudAwsAccountSensorManagementArgs) ToCloudAwsAccountSensorManagementPtrOutputWithContext

func (i CloudAwsAccountSensorManagementArgs) ToCloudAwsAccountSensorManagementPtrOutputWithContext(ctx context.Context) CloudAwsAccountSensorManagementPtrOutput

type CloudAwsAccountSensorManagementInput

type CloudAwsAccountSensorManagementInput interface {
	pulumi.Input

	ToCloudAwsAccountSensorManagementOutput() CloudAwsAccountSensorManagementOutput
	ToCloudAwsAccountSensorManagementOutputWithContext(context.Context) CloudAwsAccountSensorManagementOutput
}

CloudAwsAccountSensorManagementInput is an input type that accepts CloudAwsAccountSensorManagementArgs and CloudAwsAccountSensorManagementOutput values. You can construct a concrete instance of `CloudAwsAccountSensorManagementInput` via:

CloudAwsAccountSensorManagementArgs{...}

type CloudAwsAccountSensorManagementOutput

type CloudAwsAccountSensorManagementOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountSensorManagementOutput) ElementType

func (CloudAwsAccountSensorManagementOutput) Enabled

Enable 1-click sensor deployment

func (CloudAwsAccountSensorManagementOutput) ToCloudAwsAccountSensorManagementOutput

func (o CloudAwsAccountSensorManagementOutput) ToCloudAwsAccountSensorManagementOutput() CloudAwsAccountSensorManagementOutput

func (CloudAwsAccountSensorManagementOutput) ToCloudAwsAccountSensorManagementOutputWithContext

func (o CloudAwsAccountSensorManagementOutput) ToCloudAwsAccountSensorManagementOutputWithContext(ctx context.Context) CloudAwsAccountSensorManagementOutput

func (CloudAwsAccountSensorManagementOutput) ToCloudAwsAccountSensorManagementPtrOutput

func (o CloudAwsAccountSensorManagementOutput) ToCloudAwsAccountSensorManagementPtrOutput() CloudAwsAccountSensorManagementPtrOutput

func (CloudAwsAccountSensorManagementOutput) ToCloudAwsAccountSensorManagementPtrOutputWithContext

func (o CloudAwsAccountSensorManagementOutput) ToCloudAwsAccountSensorManagementPtrOutputWithContext(ctx context.Context) CloudAwsAccountSensorManagementPtrOutput

type CloudAwsAccountSensorManagementPtrInput

type CloudAwsAccountSensorManagementPtrInput interface {
	pulumi.Input

	ToCloudAwsAccountSensorManagementPtrOutput() CloudAwsAccountSensorManagementPtrOutput
	ToCloudAwsAccountSensorManagementPtrOutputWithContext(context.Context) CloudAwsAccountSensorManagementPtrOutput
}

CloudAwsAccountSensorManagementPtrInput is an input type that accepts CloudAwsAccountSensorManagementArgs, CloudAwsAccountSensorManagementPtr and CloudAwsAccountSensorManagementPtrOutput values. You can construct a concrete instance of `CloudAwsAccountSensorManagementPtrInput` via:

        CloudAwsAccountSensorManagementArgs{...}

or:

        nil

type CloudAwsAccountSensorManagementPtrOutput

type CloudAwsAccountSensorManagementPtrOutput struct{ *pulumi.OutputState }

func (CloudAwsAccountSensorManagementPtrOutput) Elem

func (CloudAwsAccountSensorManagementPtrOutput) ElementType

func (CloudAwsAccountSensorManagementPtrOutput) Enabled

Enable 1-click sensor deployment

func (CloudAwsAccountSensorManagementPtrOutput) ToCloudAwsAccountSensorManagementPtrOutput

func (o CloudAwsAccountSensorManagementPtrOutput) ToCloudAwsAccountSensorManagementPtrOutput() CloudAwsAccountSensorManagementPtrOutput

func (CloudAwsAccountSensorManagementPtrOutput) ToCloudAwsAccountSensorManagementPtrOutputWithContext

func (o CloudAwsAccountSensorManagementPtrOutput) ToCloudAwsAccountSensorManagementPtrOutputWithContext(ctx context.Context) CloudAwsAccountSensorManagementPtrOutput

type CloudAwsAccountState

type CloudAwsAccountState struct {
	// The AWS Account ID
	AccountId pulumi.StringPtrInput
	// The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
	AccountType    pulumi.StringPtrInput
	AssetInventory CloudAwsAccountAssetInventoryPtrInput
	// The name of the CloudTrail S3 bucket used for real-time visibility
	CloudtrailBucketName pulumi.StringPtrInput
	DeploymentMethod     pulumi.StringPtrInput
	Dspm                 CloudAwsAccountDspmPtrInput
	// The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
	DspmRoleArn pulumi.StringPtrInput
	// The name of the IAM role to be used by CrowdStrike Data Security Posture Management
	DspmRoleName pulumi.StringPtrInput
	// The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
	EventbusArn pulumi.StringPtrInput
	// The name of the Amazon EventBridge used by CrowdStrike to forward messages
	EventbusName pulumi.StringPtrInput
	// The external ID used to assume the AWS IAM role
	ExternalId pulumi.StringPtrInput
	// The ARN of the AWS IAM role used to access this AWS account
	IamRoleArn pulumi.StringPtrInput
	// The name of the AWS IAM role used to access this AWS account
	IamRoleName pulumi.StringPtrInput
	Idp         CloudAwsAccountIdpPtrInput
	// The ARN of the intermediate role used to assume the AWS IAM role
	IntermediateRoleArn pulumi.StringPtrInput
	// Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
	IsOrganizationManagementAccount pulumi.BoolPtrInput
	// The AWS Organization ID (starts with `o-`). When specified, accounts within the organization will be registered. If `targetOus` is empty, all accounts in the organization will be registered. The `accountId` must be the organization's management account ID.
	OrganizationId     pulumi.StringPtrInput
	RealtimeVisibility CloudAwsAccountRealtimeVisibilityPtrInput
	SensorManagement   CloudAwsAccountSensorManagementPtrInput
	// The list of target Organizational Units
	TargetOuses pulumi.StringArrayInput
}

func (CloudAwsAccountState) ElementType

func (CloudAwsAccountState) ElementType() reflect.Type

type DefaultPreventionPolicyLinux

type DefaultPreventionPolicyLinux struct {
	pulumi.CustomResourceState

	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware DefaultPreventionPolicyLinuxCloudAntiMalwareOutput `pulumi:"cloudAntiMalware"`
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolOutput `pulumi:"customBlocking"`
	// Description of the prevention policy.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Whether to enable the setting. Block new processes originating from files written in a container. This prevents a container from drifting from its immutable runtime state.
	DriftPrevention pulumi.BoolOutput `pulumi:"driftPrevention"`
	// Whether to enable the setting. Allows the sensor to monitor SMTP, IMAP, and POP3 traffic for malicious patterns and improved detections.
	EmailProtocolVisibility pulumi.BoolOutput `pulumi:"emailProtocolVisibility"`
	// Whether to enable the setting. Allows the sensor to monitor full CLI commands that include pipes and redirects. This is applicable only for User mode.
	ExtendedCommandLineVisibility pulumi.BoolOutput `pulumi:"extendedCommandLineVisibility"`
	// Whether to enable the setting. Allows the sensor to monitor filesystem activity for additional telemetry and improved detections.
	FilesystemVisibility pulumi.BoolOutput `pulumi:"filesystemVisibility"`
	// Whether to enable the setting. Allows the sensor to monitor unencrypted FTP traffic for malicious patterns and improved detections.
	FtpVisibility pulumi.BoolOutput `pulumi:"ftpVisibility"`
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic for malicious patterns and improved detections.
	HttpVisibility pulumi.BoolOutput `pulumi:"httpVisibility"`
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayOutput `pulumi:"ioaRuleGroups"`
	LastUpdated   pulumi.StringOutput      `pulumi:"lastUpdated"`
	// Whether to enable the setting. When enabled, the sensor will inspect memory-related operations: mmap, mprotect, ptrace and reading/writing remote process memory and produce events.
	MemoryVisibility pulumi.BoolOutput `pulumi:"memoryVisibility"`
	// Whether to enable the setting. Allows the sensor to monitor network activity for additional telemetry and improved detections.
	NetworkVisibility pulumi.BoolOutput `pulumi:"networkVisibility"`
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolOutput `pulumi:"onWriteScriptFileVisibility"`
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolOutput `pulumi:"preventSuspiciousProcesses"`
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolOutput `pulumi:"quarantine"`
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolOutput `pulumi:"scriptBasedExecutionMonitoring"`
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware DefaultPreventionPolicyLinuxSensorAntiMalwareOutput `pulumi:"sensorAntiMalware"`
	// Whether to enable the setting. Block attempts to tamper with the sensor by protecting critical components and resources. If disabled, the sensor still creates detections for tampering attempts but will not prevent the activity from occurring. Disabling is not recommended.
	SensorTamperingProtection pulumi.BoolOutput `pulumi:"sensorTamperingProtection"`
	// Whether to enable the setting. Allows the sensor to monitor TLS traffic for malicious patterns and improved detections.
	TlsVisibility pulumi.BoolOutput `pulumi:"tlsVisibility"`
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolOutput `pulumi:"uploadUnknownDetectionRelatedExecutables"`
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolOutput `pulumi:"uploadUnknownExecutables"`
}

This resource allows you to manage the default prevention policy for Linux hosts. Prevention policies allow you to manage what activity will trigger detections and preventions on your hosts. Destruction of this resource *will not* delete the default prevention policy or remove any configured settings.

## API Scopes

The following API scopes are required:

- Prevention policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_default, err := crowdstrike.NewDefaultPreventionPolicyLinux(ctx, "default", &crowdstrike.DefaultPreventionPolicyLinuxArgs{
			Description:   pulumi.String("managed by terraform"),
			IoaRuleGroups: pulumi.StringArray{},
			CloudAntiMalware: &crowdstrike.DefaultPreventionPolicyLinuxCloudAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAntiMalware: &crowdstrike.DefaultPreventionPolicyLinuxSensorAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			Quarantine:                               pulumi.Bool(true),
			CustomBlocking:                           pulumi.Bool(true),
			PreventSuspiciousProcesses:               pulumi.Bool(true),
			ScriptBasedExecutionMonitoring:           pulumi.Bool(true),
			UploadUnknownExecutables:                 pulumi.Bool(true),
			UploadUnknownDetectionRelatedExecutables: pulumi.Bool(true),
			DriftPrevention:                          pulumi.Bool(true),
			EmailProtocolVisibility:                  pulumi.Bool(true),
			FilesystemVisibility:                     pulumi.Bool(true),
			FtpVisibility:                            pulumi.Bool(true),
			HttpVisibility:                           pulumi.Bool(true),
			NetworkVisibility:                        pulumi.Bool(true),
			TlsVisibility:                            pulumi.Bool(true),
			SensorTamperingProtection:                pulumi.Bool(true),
			OnWriteScriptFileVisibility:              pulumi.Bool(true),
			MemoryVisibility:                         pulumi.Bool(true),
			ExtendedCommandLineVisibility:            pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		ctx.Export("defaultPreventionPolicyLinux", _default)
		return nil
	})
}

```

## Import

The mac default prevention policy can be imported by specifying the id.

```sh $ pulumi import crowdstrike:index/defaultPreventionPolicyLinux:DefaultPreventionPolicyLinux default 7fb858a949034a0cbca175f660f1e769 ```

func GetDefaultPreventionPolicyLinux

func GetDefaultPreventionPolicyLinux(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DefaultPreventionPolicyLinuxState, opts ...pulumi.ResourceOption) (*DefaultPreventionPolicyLinux, error)

GetDefaultPreventionPolicyLinux gets an existing DefaultPreventionPolicyLinux resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDefaultPreventionPolicyLinux

func NewDefaultPreventionPolicyLinux(ctx *pulumi.Context,
	name string, args *DefaultPreventionPolicyLinuxArgs, opts ...pulumi.ResourceOption) (*DefaultPreventionPolicyLinux, error)

NewDefaultPreventionPolicyLinux registers a new resource with the given unique name, arguments, and options.

func (*DefaultPreventionPolicyLinux) ElementType

func (*DefaultPreventionPolicyLinux) ElementType() reflect.Type

func (*DefaultPreventionPolicyLinux) ToDefaultPreventionPolicyLinuxOutput

func (i *DefaultPreventionPolicyLinux) ToDefaultPreventionPolicyLinuxOutput() DefaultPreventionPolicyLinuxOutput

func (*DefaultPreventionPolicyLinux) ToDefaultPreventionPolicyLinuxOutputWithContext

func (i *DefaultPreventionPolicyLinux) ToDefaultPreventionPolicyLinuxOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxOutput

type DefaultPreventionPolicyLinuxArgs

type DefaultPreventionPolicyLinuxArgs struct {
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware DefaultPreventionPolicyLinuxCloudAntiMalwarePtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Block new processes originating from files written in a container. This prevents a container from drifting from its immutable runtime state.
	DriftPrevention pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor SMTP, IMAP, and POP3 traffic for malicious patterns and improved detections.
	EmailProtocolVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor full CLI commands that include pipes and redirects. This is applicable only for User mode.
	ExtendedCommandLineVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor filesystem activity for additional telemetry and improved detections.
	FilesystemVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted FTP traffic for malicious patterns and improved detections.
	FtpVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic for malicious patterns and improved detections.
	HttpVisibility pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. When enabled, the sensor will inspect memory-related operations: mmap, mprotect, ptrace and reading/writing remote process memory and produce events.
	MemoryVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor network activity for additional telemetry and improved detections.
	NetworkVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware DefaultPreventionPolicyLinuxSensorAntiMalwarePtrInput
	// Whether to enable the setting. Block attempts to tamper with the sensor by protecting critical components and resources. If disabled, the sensor still creates detections for tampering attempts but will not prevent the activity from occurring. Disabling is not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor TLS traffic for malicious patterns and improved detections.
	TlsVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
}

The set of arguments for constructing a DefaultPreventionPolicyLinux resource.

func (DefaultPreventionPolicyLinuxArgs) ElementType

type DefaultPreventionPolicyLinuxArray

type DefaultPreventionPolicyLinuxArray []DefaultPreventionPolicyLinuxInput

func (DefaultPreventionPolicyLinuxArray) ElementType

func (DefaultPreventionPolicyLinuxArray) ToDefaultPreventionPolicyLinuxArrayOutput

func (i DefaultPreventionPolicyLinuxArray) ToDefaultPreventionPolicyLinuxArrayOutput() DefaultPreventionPolicyLinuxArrayOutput

func (DefaultPreventionPolicyLinuxArray) ToDefaultPreventionPolicyLinuxArrayOutputWithContext

func (i DefaultPreventionPolicyLinuxArray) ToDefaultPreventionPolicyLinuxArrayOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxArrayOutput

type DefaultPreventionPolicyLinuxArrayInput

type DefaultPreventionPolicyLinuxArrayInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyLinuxArrayOutput() DefaultPreventionPolicyLinuxArrayOutput
	ToDefaultPreventionPolicyLinuxArrayOutputWithContext(context.Context) DefaultPreventionPolicyLinuxArrayOutput
}

DefaultPreventionPolicyLinuxArrayInput is an input type that accepts DefaultPreventionPolicyLinuxArray and DefaultPreventionPolicyLinuxArrayOutput values. You can construct a concrete instance of `DefaultPreventionPolicyLinuxArrayInput` via:

DefaultPreventionPolicyLinuxArray{ DefaultPreventionPolicyLinuxArgs{...} }

type DefaultPreventionPolicyLinuxArrayOutput

type DefaultPreventionPolicyLinuxArrayOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyLinuxArrayOutput) ElementType

func (DefaultPreventionPolicyLinuxArrayOutput) Index

func (DefaultPreventionPolicyLinuxArrayOutput) ToDefaultPreventionPolicyLinuxArrayOutput

func (o DefaultPreventionPolicyLinuxArrayOutput) ToDefaultPreventionPolicyLinuxArrayOutput() DefaultPreventionPolicyLinuxArrayOutput

func (DefaultPreventionPolicyLinuxArrayOutput) ToDefaultPreventionPolicyLinuxArrayOutputWithContext

func (o DefaultPreventionPolicyLinuxArrayOutput) ToDefaultPreventionPolicyLinuxArrayOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxArrayOutput

type DefaultPreventionPolicyLinuxCloudAntiMalware

type DefaultPreventionPolicyLinuxCloudAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyLinuxCloudAntiMalwareArgs

type DefaultPreventionPolicyLinuxCloudAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyLinuxCloudAntiMalwareArgs) ElementType

func (DefaultPreventionPolicyLinuxCloudAntiMalwareArgs) ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutput

func (i DefaultPreventionPolicyLinuxCloudAntiMalwareArgs) ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutput() DefaultPreventionPolicyLinuxCloudAntiMalwareOutput

func (DefaultPreventionPolicyLinuxCloudAntiMalwareArgs) ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutputWithContext

func (i DefaultPreventionPolicyLinuxCloudAntiMalwareArgs) ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxCloudAntiMalwareOutput

func (DefaultPreventionPolicyLinuxCloudAntiMalwareArgs) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (i DefaultPreventionPolicyLinuxCloudAntiMalwareArgs) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput() DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (DefaultPreventionPolicyLinuxCloudAntiMalwareArgs) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext

func (i DefaultPreventionPolicyLinuxCloudAntiMalwareArgs) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyLinuxCloudAntiMalwareInput

type DefaultPreventionPolicyLinuxCloudAntiMalwareInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutput() DefaultPreventionPolicyLinuxCloudAntiMalwareOutput
	ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutputWithContext(context.Context) DefaultPreventionPolicyLinuxCloudAntiMalwareOutput
}

DefaultPreventionPolicyLinuxCloudAntiMalwareInput is an input type that accepts DefaultPreventionPolicyLinuxCloudAntiMalwareArgs and DefaultPreventionPolicyLinuxCloudAntiMalwareOutput values. You can construct a concrete instance of `DefaultPreventionPolicyLinuxCloudAntiMalwareInput` via:

DefaultPreventionPolicyLinuxCloudAntiMalwareArgs{...}

type DefaultPreventionPolicyLinuxCloudAntiMalwareOutput

type DefaultPreventionPolicyLinuxCloudAntiMalwareOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) ElementType

func (DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutput

func (o DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutput() DefaultPreventionPolicyLinuxCloudAntiMalwareOutput

func (DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutputWithContext

func (o DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxCloudAntiMalwareOutput

func (DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (o DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput() DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyLinuxCloudAntiMalwareOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyLinuxCloudAntiMalwarePtrInput

type DefaultPreventionPolicyLinuxCloudAntiMalwarePtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput() DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput
	ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext(context.Context) DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput
}

DefaultPreventionPolicyLinuxCloudAntiMalwarePtrInput is an input type that accepts DefaultPreventionPolicyLinuxCloudAntiMalwareArgs, DefaultPreventionPolicyLinuxCloudAntiMalwarePtr and DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyLinuxCloudAntiMalwarePtrInput` via:

        DefaultPreventionPolicyLinuxCloudAntiMalwareArgs{...}

or:

        nil

type DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput) Elem

func (DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput) ElementType

func (DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyLinuxInput

type DefaultPreventionPolicyLinuxInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyLinuxOutput() DefaultPreventionPolicyLinuxOutput
	ToDefaultPreventionPolicyLinuxOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxOutput
}

type DefaultPreventionPolicyLinuxMap

type DefaultPreventionPolicyLinuxMap map[string]DefaultPreventionPolicyLinuxInput

func (DefaultPreventionPolicyLinuxMap) ElementType

func (DefaultPreventionPolicyLinuxMap) ToDefaultPreventionPolicyLinuxMapOutput

func (i DefaultPreventionPolicyLinuxMap) ToDefaultPreventionPolicyLinuxMapOutput() DefaultPreventionPolicyLinuxMapOutput

func (DefaultPreventionPolicyLinuxMap) ToDefaultPreventionPolicyLinuxMapOutputWithContext

func (i DefaultPreventionPolicyLinuxMap) ToDefaultPreventionPolicyLinuxMapOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxMapOutput

type DefaultPreventionPolicyLinuxMapInput

type DefaultPreventionPolicyLinuxMapInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyLinuxMapOutput() DefaultPreventionPolicyLinuxMapOutput
	ToDefaultPreventionPolicyLinuxMapOutputWithContext(context.Context) DefaultPreventionPolicyLinuxMapOutput
}

DefaultPreventionPolicyLinuxMapInput is an input type that accepts DefaultPreventionPolicyLinuxMap and DefaultPreventionPolicyLinuxMapOutput values. You can construct a concrete instance of `DefaultPreventionPolicyLinuxMapInput` via:

DefaultPreventionPolicyLinuxMap{ "key": DefaultPreventionPolicyLinuxArgs{...} }

type DefaultPreventionPolicyLinuxMapOutput

type DefaultPreventionPolicyLinuxMapOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyLinuxMapOutput) ElementType

func (DefaultPreventionPolicyLinuxMapOutput) MapIndex

func (DefaultPreventionPolicyLinuxMapOutput) ToDefaultPreventionPolicyLinuxMapOutput

func (o DefaultPreventionPolicyLinuxMapOutput) ToDefaultPreventionPolicyLinuxMapOutput() DefaultPreventionPolicyLinuxMapOutput

func (DefaultPreventionPolicyLinuxMapOutput) ToDefaultPreventionPolicyLinuxMapOutputWithContext

func (o DefaultPreventionPolicyLinuxMapOutput) ToDefaultPreventionPolicyLinuxMapOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxMapOutput

type DefaultPreventionPolicyLinuxOutput

type DefaultPreventionPolicyLinuxOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyLinuxOutput) CloudAntiMalware

Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.

func (DefaultPreventionPolicyLinuxOutput) CustomBlocking

Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".

func (DefaultPreventionPolicyLinuxOutput) Description

Description of the prevention policy.

func (DefaultPreventionPolicyLinuxOutput) DriftPrevention

Whether to enable the setting. Block new processes originating from files written in a container. This prevents a container from drifting from its immutable runtime state.

func (DefaultPreventionPolicyLinuxOutput) ElementType

func (DefaultPreventionPolicyLinuxOutput) EmailProtocolVisibility

func (o DefaultPreventionPolicyLinuxOutput) EmailProtocolVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor SMTP, IMAP, and POP3 traffic for malicious patterns and improved detections.

func (DefaultPreventionPolicyLinuxOutput) ExtendedCommandLineVisibility

func (o DefaultPreventionPolicyLinuxOutput) ExtendedCommandLineVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor full CLI commands that include pipes and redirects. This is applicable only for User mode.

func (DefaultPreventionPolicyLinuxOutput) FilesystemVisibility

func (o DefaultPreventionPolicyLinuxOutput) FilesystemVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor filesystem activity for additional telemetry and improved detections.

func (DefaultPreventionPolicyLinuxOutput) FtpVisibility

Whether to enable the setting. Allows the sensor to monitor unencrypted FTP traffic for malicious patterns and improved detections.

func (DefaultPreventionPolicyLinuxOutput) HttpVisibility

Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic for malicious patterns and improved detections.

func (DefaultPreventionPolicyLinuxOutput) IoaRuleGroups

IOA Rule Group to attach to the prevention policy.

func (DefaultPreventionPolicyLinuxOutput) LastUpdated

func (DefaultPreventionPolicyLinuxOutput) MemoryVisibility

Whether to enable the setting. When enabled, the sensor will inspect memory-related operations: mmap, mprotect, ptrace and reading/writing remote process memory and produce events.

func (DefaultPreventionPolicyLinuxOutput) NetworkVisibility

Whether to enable the setting. Allows the sensor to monitor network activity for additional telemetry and improved detections.

func (DefaultPreventionPolicyLinuxOutput) OnWriteScriptFileVisibility

func (o DefaultPreventionPolicyLinuxOutput) OnWriteScriptFileVisibility() pulumi.BoolOutput

Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.

func (DefaultPreventionPolicyLinuxOutput) PreventSuspiciousProcesses

func (o DefaultPreventionPolicyLinuxOutput) PreventSuspiciousProcesses() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.

func (DefaultPreventionPolicyLinuxOutput) Quarantine

Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.

func (DefaultPreventionPolicyLinuxOutput) ScriptBasedExecutionMonitoring

func (o DefaultPreventionPolicyLinuxOutput) ScriptBasedExecutionMonitoring() pulumi.BoolOutput

Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.

func (DefaultPreventionPolicyLinuxOutput) SensorAntiMalware

For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.

func (DefaultPreventionPolicyLinuxOutput) SensorTamperingProtection

func (o DefaultPreventionPolicyLinuxOutput) SensorTamperingProtection() pulumi.BoolOutput

Whether to enable the setting. Block attempts to tamper with the sensor by protecting critical components and resources. If disabled, the sensor still creates detections for tampering attempts but will not prevent the activity from occurring. Disabling is not recommended.

func (DefaultPreventionPolicyLinuxOutput) TlsVisibility

Whether to enable the setting. Allows the sensor to monitor TLS traffic for malicious patterns and improved detections.

func (DefaultPreventionPolicyLinuxOutput) ToDefaultPreventionPolicyLinuxOutput

func (o DefaultPreventionPolicyLinuxOutput) ToDefaultPreventionPolicyLinuxOutput() DefaultPreventionPolicyLinuxOutput

func (DefaultPreventionPolicyLinuxOutput) ToDefaultPreventionPolicyLinuxOutputWithContext

func (o DefaultPreventionPolicyLinuxOutput) ToDefaultPreventionPolicyLinuxOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxOutput

func (DefaultPreventionPolicyLinuxOutput) UploadUnknownDetectionRelatedExecutables

func (o DefaultPreventionPolicyLinuxOutput) UploadUnknownDetectionRelatedExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.

func (DefaultPreventionPolicyLinuxOutput) UploadUnknownExecutables

func (o DefaultPreventionPolicyLinuxOutput) UploadUnknownExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.

type DefaultPreventionPolicyLinuxSensorAntiMalware

type DefaultPreventionPolicyLinuxSensorAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyLinuxSensorAntiMalwareArgs

type DefaultPreventionPolicyLinuxSensorAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyLinuxSensorAntiMalwareArgs) ElementType

func (DefaultPreventionPolicyLinuxSensorAntiMalwareArgs) ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutput

func (i DefaultPreventionPolicyLinuxSensorAntiMalwareArgs) ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutput() DefaultPreventionPolicyLinuxSensorAntiMalwareOutput

func (DefaultPreventionPolicyLinuxSensorAntiMalwareArgs) ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutputWithContext

func (i DefaultPreventionPolicyLinuxSensorAntiMalwareArgs) ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxSensorAntiMalwareOutput

func (DefaultPreventionPolicyLinuxSensorAntiMalwareArgs) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (i DefaultPreventionPolicyLinuxSensorAntiMalwareArgs) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput() DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (DefaultPreventionPolicyLinuxSensorAntiMalwareArgs) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext

func (i DefaultPreventionPolicyLinuxSensorAntiMalwareArgs) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyLinuxSensorAntiMalwareInput

type DefaultPreventionPolicyLinuxSensorAntiMalwareInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutput() DefaultPreventionPolicyLinuxSensorAntiMalwareOutput
	ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutputWithContext(context.Context) DefaultPreventionPolicyLinuxSensorAntiMalwareOutput
}

DefaultPreventionPolicyLinuxSensorAntiMalwareInput is an input type that accepts DefaultPreventionPolicyLinuxSensorAntiMalwareArgs and DefaultPreventionPolicyLinuxSensorAntiMalwareOutput values. You can construct a concrete instance of `DefaultPreventionPolicyLinuxSensorAntiMalwareInput` via:

DefaultPreventionPolicyLinuxSensorAntiMalwareArgs{...}

type DefaultPreventionPolicyLinuxSensorAntiMalwareOutput

type DefaultPreventionPolicyLinuxSensorAntiMalwareOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) ElementType

func (DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutput

func (o DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutput() DefaultPreventionPolicyLinuxSensorAntiMalwareOutput

func (DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutputWithContext

func (o DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxSensorAntiMalwareOutput

func (DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (o DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput() DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyLinuxSensorAntiMalwareOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyLinuxSensorAntiMalwarePtrInput

type DefaultPreventionPolicyLinuxSensorAntiMalwarePtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput() DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput
	ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext(context.Context) DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput
}

DefaultPreventionPolicyLinuxSensorAntiMalwarePtrInput is an input type that accepts DefaultPreventionPolicyLinuxSensorAntiMalwareArgs, DefaultPreventionPolicyLinuxSensorAntiMalwarePtr and DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyLinuxSensorAntiMalwarePtrInput` via:

        DefaultPreventionPolicyLinuxSensorAntiMalwareArgs{...}

or:

        nil

type DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput) Elem

func (DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput) ElementType

func (DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput) ToDefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyLinuxSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyLinuxState

type DefaultPreventionPolicyLinuxState struct {
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware DefaultPreventionPolicyLinuxCloudAntiMalwarePtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Block new processes originating from files written in a container. This prevents a container from drifting from its immutable runtime state.
	DriftPrevention pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor SMTP, IMAP, and POP3 traffic for malicious patterns and improved detections.
	EmailProtocolVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor full CLI commands that include pipes and redirects. This is applicable only for User mode.
	ExtendedCommandLineVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor filesystem activity for additional telemetry and improved detections.
	FilesystemVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted FTP traffic for malicious patterns and improved detections.
	FtpVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic for malicious patterns and improved detections.
	HttpVisibility pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	LastUpdated   pulumi.StringPtrInput
	// Whether to enable the setting. When enabled, the sensor will inspect memory-related operations: mmap, mprotect, ptrace and reading/writing remote process memory and produce events.
	MemoryVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor network activity for additional telemetry and improved detections.
	NetworkVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware DefaultPreventionPolicyLinuxSensorAntiMalwarePtrInput
	// Whether to enable the setting. Block attempts to tamper with the sensor by protecting critical components and resources. If disabled, the sensor still creates detections for tampering attempts but will not prevent the activity from occurring. Disabling is not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor TLS traffic for malicious patterns and improved detections.
	TlsVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
}

func (DefaultPreventionPolicyLinuxState) ElementType

type DefaultPreventionPolicyMac

type DefaultPreventionPolicyMac struct {
	pulumi.CustomResourceState

	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolOutput `pulumi:"chopperWebshell"`
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	CloudAdwareAndPup DefaultPreventionPolicyMacCloudAdwareAndPupOutput `pulumi:"cloudAdwareAndPup"`
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware DefaultPreventionPolicyMacCloudAntiMalwareOutput `pulumi:"cloudAntiMalware"`
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolOutput `pulumi:"customBlocking"`
	// Description of the prevention policy.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolOutput `pulumi:"detectOnWrite"`
	// Whether to enable the setting. A process with behaviors indicative of the Empyre Backdoor was terminated.
	EmpyreBackdoor pulumi.BoolOutput `pulumi:"empyreBackdoor"`
	// Whether to enable the setting. An attempt to dump a user’s hashed password was blocked.
	HashCollector pulumi.BoolOutput `pulumi:"hashCollector"`
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolOutput `pulumi:"intelligenceSourcedThreats"`
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayOutput `pulumi:"ioaRuleGroups"`
	// Whether to enable the setting. An attempt to recover a plaintext password via the kcpassword file was blocked.
	KcPasswordDecoded pulumi.BoolOutput   `pulumi:"kcPasswordDecoded"`
	LastUpdated       pulumi.StringOutput `pulumi:"lastUpdated"`
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. See these messages in Console.app by searching for Process: Falcon Notifications.
	NotifyEndUsers pulumi.BoolOutput `pulumi:"notifyEndUsers"`
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolOutput `pulumi:"preventSuspiciousProcesses"`
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolOutput `pulumi:"quarantine"`
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolOutput `pulumi:"quarantineOnWrite"`
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolOutput `pulumi:"scriptBasedExecutionMonitoring"`
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent adware and potentially unwanted programs (PUP).
	SensorAdwareAndPup DefaultPreventionPolicyMacSensorAdwareAndPupOutput `pulumi:"sensorAdwareAndPup"`
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware DefaultPreventionPolicyMacSensorAntiMalwareOutput `pulumi:"sensorAntiMalware"`
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolOutput `pulumi:"sensorTamperingProtection"`
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolOutput `pulumi:"uploadUnknownDetectionRelatedExecutables"`
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolOutput `pulumi:"uploadUnknownExecutables"`
	// Whether to enable the setting. The execution of an XPCOM shell was blocked.
	XpcomShell pulumi.BoolOutput `pulumi:"xpcomShell"`
}

This resource allows you to manage the default prevention policy for Mac hosts. Prevention policies allow you to manage what activity will trigger detections and preventions on your hosts. Destruction of this resource *will not* delete the default prevention policy or remove any configured settings.

## API Scopes

The following API scopes are required:

- Prevention policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_default, err := crowdstrike.NewDefaultPreventionPolicyMac(ctx, "default", &crowdstrike.DefaultPreventionPolicyMacArgs{
			Description:   pulumi.String("managed by terraform"),
			IoaRuleGroups: pulumi.StringArray{},
			CloudAdwareAndPup: &crowdstrike.DefaultPreventionPolicyMacCloudAdwareAndPupArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			CloudAntiMalware: &crowdstrike.DefaultPreventionPolicyMacCloudAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAntiMalware: &crowdstrike.DefaultPreventionPolicyMacSensorAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAdwareAndPup: &crowdstrike.DefaultPreventionPolicyMacSensorAdwareAndPupArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			NotifyEndUsers:                           pulumi.Bool(true),
			CustomBlocking:                           pulumi.Bool(true),
			DetectOnWrite:                            pulumi.Bool(true),
			IntelligenceSourcedThreats:               pulumi.Bool(true),
			PreventSuspiciousProcesses:               pulumi.Bool(true),
			Quarantine:                               pulumi.Bool(true),
			QuarantineOnWrite:                        pulumi.Bool(true),
			ScriptBasedExecutionMonitoring:           pulumi.Bool(true),
			SensorTamperingProtection:                pulumi.Bool(true),
			UploadUnknownExecutables:                 pulumi.Bool(true),
			UploadUnknownDetectionRelatedExecutables: pulumi.Bool(true),
			XpcomShell:                               pulumi.Bool(true),
			KcPasswordDecoded:                        pulumi.Bool(true),
			HashCollector:                            pulumi.Bool(true),
			EmpyreBackdoor:                           pulumi.Bool(true),
			ChopperWebshell:                          pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		ctx.Export("defaultPreventionPolicyMac", _default)
		return nil
	})
}

```

## Import

The windows default prevention policy can be imported by specifying the id.

```sh $ pulumi import crowdstrike:index/defaultPreventionPolicyMac:DefaultPreventionPolicyMac default 7fb858a949034a0cbca175f660f1e769 ```

func GetDefaultPreventionPolicyMac

func GetDefaultPreventionPolicyMac(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DefaultPreventionPolicyMacState, opts ...pulumi.ResourceOption) (*DefaultPreventionPolicyMac, error)

GetDefaultPreventionPolicyMac gets an existing DefaultPreventionPolicyMac resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDefaultPreventionPolicyMac

func NewDefaultPreventionPolicyMac(ctx *pulumi.Context,
	name string, args *DefaultPreventionPolicyMacArgs, opts ...pulumi.ResourceOption) (*DefaultPreventionPolicyMac, error)

NewDefaultPreventionPolicyMac registers a new resource with the given unique name, arguments, and options.

func (*DefaultPreventionPolicyMac) ElementType

func (*DefaultPreventionPolicyMac) ElementType() reflect.Type

func (*DefaultPreventionPolicyMac) ToDefaultPreventionPolicyMacOutput

func (i *DefaultPreventionPolicyMac) ToDefaultPreventionPolicyMacOutput() DefaultPreventionPolicyMacOutput

func (*DefaultPreventionPolicyMac) ToDefaultPreventionPolicyMacOutputWithContext

func (i *DefaultPreventionPolicyMac) ToDefaultPreventionPolicyMacOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacOutput

type DefaultPreventionPolicyMacArgs

type DefaultPreventionPolicyMacArgs struct {
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	CloudAdwareAndPup DefaultPreventionPolicyMacCloudAdwareAndPupPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware DefaultPreventionPolicyMacCloudAntiMalwarePtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. A process with behaviors indicative of the Empyre Backdoor was terminated.
	EmpyreBackdoor pulumi.BoolPtrInput
	// Whether to enable the setting. An attempt to dump a user’s hashed password was blocked.
	HashCollector pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. An attempt to recover a plaintext password via the kcpassword file was blocked.
	KcPasswordDecoded pulumi.BoolPtrInput
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. See these messages in Console.app by searching for Process: Falcon Notifications.
	NotifyEndUsers pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolPtrInput
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent adware and potentially unwanted programs (PUP).
	SensorAdwareAndPup DefaultPreventionPolicyMacSensorAdwareAndPupPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware DefaultPreventionPolicyMacSensorAntiMalwarePtrInput
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. The execution of an XPCOM shell was blocked.
	XpcomShell pulumi.BoolPtrInput
}

The set of arguments for constructing a DefaultPreventionPolicyMac resource.

func (DefaultPreventionPolicyMacArgs) ElementType

type DefaultPreventionPolicyMacArray

type DefaultPreventionPolicyMacArray []DefaultPreventionPolicyMacInput

func (DefaultPreventionPolicyMacArray) ElementType

func (DefaultPreventionPolicyMacArray) ToDefaultPreventionPolicyMacArrayOutput

func (i DefaultPreventionPolicyMacArray) ToDefaultPreventionPolicyMacArrayOutput() DefaultPreventionPolicyMacArrayOutput

func (DefaultPreventionPolicyMacArray) ToDefaultPreventionPolicyMacArrayOutputWithContext

func (i DefaultPreventionPolicyMacArray) ToDefaultPreventionPolicyMacArrayOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacArrayOutput

type DefaultPreventionPolicyMacArrayInput

type DefaultPreventionPolicyMacArrayInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacArrayOutput() DefaultPreventionPolicyMacArrayOutput
	ToDefaultPreventionPolicyMacArrayOutputWithContext(context.Context) DefaultPreventionPolicyMacArrayOutput
}

DefaultPreventionPolicyMacArrayInput is an input type that accepts DefaultPreventionPolicyMacArray and DefaultPreventionPolicyMacArrayOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacArrayInput` via:

DefaultPreventionPolicyMacArray{ DefaultPreventionPolicyMacArgs{...} }

type DefaultPreventionPolicyMacArrayOutput

type DefaultPreventionPolicyMacArrayOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacArrayOutput) ElementType

func (DefaultPreventionPolicyMacArrayOutput) Index

func (DefaultPreventionPolicyMacArrayOutput) ToDefaultPreventionPolicyMacArrayOutput

func (o DefaultPreventionPolicyMacArrayOutput) ToDefaultPreventionPolicyMacArrayOutput() DefaultPreventionPolicyMacArrayOutput

func (DefaultPreventionPolicyMacArrayOutput) ToDefaultPreventionPolicyMacArrayOutputWithContext

func (o DefaultPreventionPolicyMacArrayOutput) ToDefaultPreventionPolicyMacArrayOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacArrayOutput

type DefaultPreventionPolicyMacCloudAdwareAndPup

type DefaultPreventionPolicyMacCloudAdwareAndPup struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyMacCloudAdwareAndPupArgs

type DefaultPreventionPolicyMacCloudAdwareAndPupArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyMacCloudAdwareAndPupArgs) ElementType

func (DefaultPreventionPolicyMacCloudAdwareAndPupArgs) ToDefaultPreventionPolicyMacCloudAdwareAndPupOutput

func (i DefaultPreventionPolicyMacCloudAdwareAndPupArgs) ToDefaultPreventionPolicyMacCloudAdwareAndPupOutput() DefaultPreventionPolicyMacCloudAdwareAndPupOutput

func (DefaultPreventionPolicyMacCloudAdwareAndPupArgs) ToDefaultPreventionPolicyMacCloudAdwareAndPupOutputWithContext

func (i DefaultPreventionPolicyMacCloudAdwareAndPupArgs) ToDefaultPreventionPolicyMacCloudAdwareAndPupOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAdwareAndPupOutput

func (DefaultPreventionPolicyMacCloudAdwareAndPupArgs) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput

func (i DefaultPreventionPolicyMacCloudAdwareAndPupArgs) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput() DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput

func (DefaultPreventionPolicyMacCloudAdwareAndPupArgs) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext

func (i DefaultPreventionPolicyMacCloudAdwareAndPupArgs) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput

type DefaultPreventionPolicyMacCloudAdwareAndPupInput

type DefaultPreventionPolicyMacCloudAdwareAndPupInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacCloudAdwareAndPupOutput() DefaultPreventionPolicyMacCloudAdwareAndPupOutput
	ToDefaultPreventionPolicyMacCloudAdwareAndPupOutputWithContext(context.Context) DefaultPreventionPolicyMacCloudAdwareAndPupOutput
}

DefaultPreventionPolicyMacCloudAdwareAndPupInput is an input type that accepts DefaultPreventionPolicyMacCloudAdwareAndPupArgs and DefaultPreventionPolicyMacCloudAdwareAndPupOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacCloudAdwareAndPupInput` via:

DefaultPreventionPolicyMacCloudAdwareAndPupArgs{...}

type DefaultPreventionPolicyMacCloudAdwareAndPupOutput

type DefaultPreventionPolicyMacCloudAdwareAndPupOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacCloudAdwareAndPupOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyMacCloudAdwareAndPupOutput) ElementType

func (DefaultPreventionPolicyMacCloudAdwareAndPupOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyMacCloudAdwareAndPupOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupOutput

func (o DefaultPreventionPolicyMacCloudAdwareAndPupOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupOutput() DefaultPreventionPolicyMacCloudAdwareAndPupOutput

func (DefaultPreventionPolicyMacCloudAdwareAndPupOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupOutputWithContext

func (o DefaultPreventionPolicyMacCloudAdwareAndPupOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAdwareAndPupOutput

func (DefaultPreventionPolicyMacCloudAdwareAndPupOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput

func (o DefaultPreventionPolicyMacCloudAdwareAndPupOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput() DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput

func (DefaultPreventionPolicyMacCloudAdwareAndPupOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext

func (o DefaultPreventionPolicyMacCloudAdwareAndPupOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput

type DefaultPreventionPolicyMacCloudAdwareAndPupPtrInput

type DefaultPreventionPolicyMacCloudAdwareAndPupPtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput() DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput
	ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext(context.Context) DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput
}

DefaultPreventionPolicyMacCloudAdwareAndPupPtrInput is an input type that accepts DefaultPreventionPolicyMacCloudAdwareAndPupArgs, DefaultPreventionPolicyMacCloudAdwareAndPupPtr and DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacCloudAdwareAndPupPtrInput` via:

        DefaultPreventionPolicyMacCloudAdwareAndPupArgs{...}

or:

        nil

type DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput

type DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput) Elem

func (DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput) ElementType

func (DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput

func (DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext

func (o DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput) ToDefaultPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAdwareAndPupPtrOutput

type DefaultPreventionPolicyMacCloudAntiMalware

type DefaultPreventionPolicyMacCloudAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyMacCloudAntiMalwareArgs

type DefaultPreventionPolicyMacCloudAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyMacCloudAntiMalwareArgs) ElementType

func (DefaultPreventionPolicyMacCloudAntiMalwareArgs) ToDefaultPreventionPolicyMacCloudAntiMalwareOutput

func (i DefaultPreventionPolicyMacCloudAntiMalwareArgs) ToDefaultPreventionPolicyMacCloudAntiMalwareOutput() DefaultPreventionPolicyMacCloudAntiMalwareOutput

func (DefaultPreventionPolicyMacCloudAntiMalwareArgs) ToDefaultPreventionPolicyMacCloudAntiMalwareOutputWithContext

func (i DefaultPreventionPolicyMacCloudAntiMalwareArgs) ToDefaultPreventionPolicyMacCloudAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAntiMalwareOutput

func (DefaultPreventionPolicyMacCloudAntiMalwareArgs) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

func (i DefaultPreventionPolicyMacCloudAntiMalwareArgs) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutput() DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

func (DefaultPreventionPolicyMacCloudAntiMalwareArgs) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext

func (i DefaultPreventionPolicyMacCloudAntiMalwareArgs) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyMacCloudAntiMalwareInput

type DefaultPreventionPolicyMacCloudAntiMalwareInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacCloudAntiMalwareOutput() DefaultPreventionPolicyMacCloudAntiMalwareOutput
	ToDefaultPreventionPolicyMacCloudAntiMalwareOutputWithContext(context.Context) DefaultPreventionPolicyMacCloudAntiMalwareOutput
}

DefaultPreventionPolicyMacCloudAntiMalwareInput is an input type that accepts DefaultPreventionPolicyMacCloudAntiMalwareArgs and DefaultPreventionPolicyMacCloudAntiMalwareOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacCloudAntiMalwareInput` via:

DefaultPreventionPolicyMacCloudAntiMalwareArgs{...}

type DefaultPreventionPolicyMacCloudAntiMalwareOutput

type DefaultPreventionPolicyMacCloudAntiMalwareOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacCloudAntiMalwareOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyMacCloudAntiMalwareOutput) ElementType

func (DefaultPreventionPolicyMacCloudAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyMacCloudAntiMalwareOutput) ToDefaultPreventionPolicyMacCloudAntiMalwareOutput

func (o DefaultPreventionPolicyMacCloudAntiMalwareOutput) ToDefaultPreventionPolicyMacCloudAntiMalwareOutput() DefaultPreventionPolicyMacCloudAntiMalwareOutput

func (DefaultPreventionPolicyMacCloudAntiMalwareOutput) ToDefaultPreventionPolicyMacCloudAntiMalwareOutputWithContext

func (o DefaultPreventionPolicyMacCloudAntiMalwareOutput) ToDefaultPreventionPolicyMacCloudAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAntiMalwareOutput

func (DefaultPreventionPolicyMacCloudAntiMalwareOutput) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

func (o DefaultPreventionPolicyMacCloudAntiMalwareOutput) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutput() DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

func (DefaultPreventionPolicyMacCloudAntiMalwareOutput) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyMacCloudAntiMalwareOutput) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyMacCloudAntiMalwarePtrInput

type DefaultPreventionPolicyMacCloudAntiMalwarePtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutput() DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput
	ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext(context.Context) DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput
}

DefaultPreventionPolicyMacCloudAntiMalwarePtrInput is an input type that accepts DefaultPreventionPolicyMacCloudAntiMalwareArgs, DefaultPreventionPolicyMacCloudAntiMalwarePtr and DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacCloudAntiMalwarePtrInput` via:

        DefaultPreventionPolicyMacCloudAntiMalwareArgs{...}

or:

        nil

type DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput) Elem

func (DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput) ElementType

func (DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

func (o DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutput() DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

func (DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyMacInput

type DefaultPreventionPolicyMacInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacOutput() DefaultPreventionPolicyMacOutput
	ToDefaultPreventionPolicyMacOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacOutput
}

type DefaultPreventionPolicyMacMap

type DefaultPreventionPolicyMacMap map[string]DefaultPreventionPolicyMacInput

func (DefaultPreventionPolicyMacMap) ElementType

func (DefaultPreventionPolicyMacMap) ToDefaultPreventionPolicyMacMapOutput

func (i DefaultPreventionPolicyMacMap) ToDefaultPreventionPolicyMacMapOutput() DefaultPreventionPolicyMacMapOutput

func (DefaultPreventionPolicyMacMap) ToDefaultPreventionPolicyMacMapOutputWithContext

func (i DefaultPreventionPolicyMacMap) ToDefaultPreventionPolicyMacMapOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacMapOutput

type DefaultPreventionPolicyMacMapInput

type DefaultPreventionPolicyMacMapInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacMapOutput() DefaultPreventionPolicyMacMapOutput
	ToDefaultPreventionPolicyMacMapOutputWithContext(context.Context) DefaultPreventionPolicyMacMapOutput
}

DefaultPreventionPolicyMacMapInput is an input type that accepts DefaultPreventionPolicyMacMap and DefaultPreventionPolicyMacMapOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacMapInput` via:

DefaultPreventionPolicyMacMap{ "key": DefaultPreventionPolicyMacArgs{...} }

type DefaultPreventionPolicyMacMapOutput

type DefaultPreventionPolicyMacMapOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacMapOutput) ElementType

func (DefaultPreventionPolicyMacMapOutput) MapIndex

func (DefaultPreventionPolicyMacMapOutput) ToDefaultPreventionPolicyMacMapOutput

func (o DefaultPreventionPolicyMacMapOutput) ToDefaultPreventionPolicyMacMapOutput() DefaultPreventionPolicyMacMapOutput

func (DefaultPreventionPolicyMacMapOutput) ToDefaultPreventionPolicyMacMapOutputWithContext

func (o DefaultPreventionPolicyMacMapOutput) ToDefaultPreventionPolicyMacMapOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacMapOutput

type DefaultPreventionPolicyMacOutput

type DefaultPreventionPolicyMacOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacOutput) ChopperWebshell

Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.

func (DefaultPreventionPolicyMacOutput) CloudAdwareAndPup

Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.

func (DefaultPreventionPolicyMacOutput) CloudAntiMalware

Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.

func (DefaultPreventionPolicyMacOutput) CustomBlocking

Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".

func (DefaultPreventionPolicyMacOutput) Description

Description of the prevention policy.

func (DefaultPreventionPolicyMacOutput) DetectOnWrite

Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.

func (DefaultPreventionPolicyMacOutput) ElementType

func (DefaultPreventionPolicyMacOutput) EmpyreBackdoor

Whether to enable the setting. A process with behaviors indicative of the Empyre Backdoor was terminated.

func (DefaultPreventionPolicyMacOutput) HashCollector

Whether to enable the setting. An attempt to dump a user’s hashed password was blocked.

func (DefaultPreventionPolicyMacOutput) IntelligenceSourcedThreats

func (o DefaultPreventionPolicyMacOutput) IntelligenceSourcedThreats() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.

func (DefaultPreventionPolicyMacOutput) IoaRuleGroups

IOA Rule Group to attach to the prevention policy.

func (DefaultPreventionPolicyMacOutput) KcPasswordDecoded

func (o DefaultPreventionPolicyMacOutput) KcPasswordDecoded() pulumi.BoolOutput

Whether to enable the setting. An attempt to recover a plaintext password via the kcpassword file was blocked.

func (DefaultPreventionPolicyMacOutput) LastUpdated

func (DefaultPreventionPolicyMacOutput) NotifyEndUsers

Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. See these messages in Console.app by searching for Process: Falcon Notifications.

func (DefaultPreventionPolicyMacOutput) PreventSuspiciousProcesses

func (o DefaultPreventionPolicyMacOutput) PreventSuspiciousProcesses() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.

func (DefaultPreventionPolicyMacOutput) Quarantine

Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.

func (DefaultPreventionPolicyMacOutput) QuarantineOnWrite

func (o DefaultPreventionPolicyMacOutput) QuarantineOnWrite() pulumi.BoolOutput

Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.

func (DefaultPreventionPolicyMacOutput) ScriptBasedExecutionMonitoring

func (o DefaultPreventionPolicyMacOutput) ScriptBasedExecutionMonitoring() pulumi.BoolOutput

Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.

func (DefaultPreventionPolicyMacOutput) SensorAdwareAndPup

For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent adware and potentially unwanted programs (PUP).

func (DefaultPreventionPolicyMacOutput) SensorAntiMalware

For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.

func (DefaultPreventionPolicyMacOutput) SensorTamperingProtection

func (o DefaultPreventionPolicyMacOutput) SensorTamperingProtection() pulumi.BoolOutput

Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.

func (DefaultPreventionPolicyMacOutput) ToDefaultPreventionPolicyMacOutput

func (o DefaultPreventionPolicyMacOutput) ToDefaultPreventionPolicyMacOutput() DefaultPreventionPolicyMacOutput

func (DefaultPreventionPolicyMacOutput) ToDefaultPreventionPolicyMacOutputWithContext

func (o DefaultPreventionPolicyMacOutput) ToDefaultPreventionPolicyMacOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacOutput

func (DefaultPreventionPolicyMacOutput) UploadUnknownDetectionRelatedExecutables

func (o DefaultPreventionPolicyMacOutput) UploadUnknownDetectionRelatedExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.

func (DefaultPreventionPolicyMacOutput) UploadUnknownExecutables

func (o DefaultPreventionPolicyMacOutput) UploadUnknownExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.

func (DefaultPreventionPolicyMacOutput) XpcomShell

Whether to enable the setting. The execution of an XPCOM shell was blocked.

type DefaultPreventionPolicyMacSensorAdwareAndPup

type DefaultPreventionPolicyMacSensorAdwareAndPup struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyMacSensorAdwareAndPupArgs

type DefaultPreventionPolicyMacSensorAdwareAndPupArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyMacSensorAdwareAndPupArgs) ElementType

func (DefaultPreventionPolicyMacSensorAdwareAndPupArgs) ToDefaultPreventionPolicyMacSensorAdwareAndPupOutput

func (i DefaultPreventionPolicyMacSensorAdwareAndPupArgs) ToDefaultPreventionPolicyMacSensorAdwareAndPupOutput() DefaultPreventionPolicyMacSensorAdwareAndPupOutput

func (DefaultPreventionPolicyMacSensorAdwareAndPupArgs) ToDefaultPreventionPolicyMacSensorAdwareAndPupOutputWithContext

func (i DefaultPreventionPolicyMacSensorAdwareAndPupArgs) ToDefaultPreventionPolicyMacSensorAdwareAndPupOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAdwareAndPupOutput

func (DefaultPreventionPolicyMacSensorAdwareAndPupArgs) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput

func (i DefaultPreventionPolicyMacSensorAdwareAndPupArgs) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput() DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput

func (DefaultPreventionPolicyMacSensorAdwareAndPupArgs) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext

func (i DefaultPreventionPolicyMacSensorAdwareAndPupArgs) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput

type DefaultPreventionPolicyMacSensorAdwareAndPupInput

type DefaultPreventionPolicyMacSensorAdwareAndPupInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacSensorAdwareAndPupOutput() DefaultPreventionPolicyMacSensorAdwareAndPupOutput
	ToDefaultPreventionPolicyMacSensorAdwareAndPupOutputWithContext(context.Context) DefaultPreventionPolicyMacSensorAdwareAndPupOutput
}

DefaultPreventionPolicyMacSensorAdwareAndPupInput is an input type that accepts DefaultPreventionPolicyMacSensorAdwareAndPupArgs and DefaultPreventionPolicyMacSensorAdwareAndPupOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacSensorAdwareAndPupInput` via:

DefaultPreventionPolicyMacSensorAdwareAndPupArgs{...}

type DefaultPreventionPolicyMacSensorAdwareAndPupOutput

type DefaultPreventionPolicyMacSensorAdwareAndPupOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacSensorAdwareAndPupOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyMacSensorAdwareAndPupOutput) ElementType

func (DefaultPreventionPolicyMacSensorAdwareAndPupOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyMacSensorAdwareAndPupOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupOutput

func (o DefaultPreventionPolicyMacSensorAdwareAndPupOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupOutput() DefaultPreventionPolicyMacSensorAdwareAndPupOutput

func (DefaultPreventionPolicyMacSensorAdwareAndPupOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupOutputWithContext

func (o DefaultPreventionPolicyMacSensorAdwareAndPupOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAdwareAndPupOutput

func (DefaultPreventionPolicyMacSensorAdwareAndPupOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput

func (o DefaultPreventionPolicyMacSensorAdwareAndPupOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput() DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput

func (DefaultPreventionPolicyMacSensorAdwareAndPupOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext

func (o DefaultPreventionPolicyMacSensorAdwareAndPupOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput

type DefaultPreventionPolicyMacSensorAdwareAndPupPtrInput

type DefaultPreventionPolicyMacSensorAdwareAndPupPtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput() DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput
	ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext(context.Context) DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput
}

DefaultPreventionPolicyMacSensorAdwareAndPupPtrInput is an input type that accepts DefaultPreventionPolicyMacSensorAdwareAndPupArgs, DefaultPreventionPolicyMacSensorAdwareAndPupPtr and DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacSensorAdwareAndPupPtrInput` via:

        DefaultPreventionPolicyMacSensorAdwareAndPupArgs{...}

or:

        nil

type DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput

type DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput) Elem

func (DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput) ElementType

func (DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput

func (DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext

func (o DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput) ToDefaultPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAdwareAndPupPtrOutput

type DefaultPreventionPolicyMacSensorAntiMalware

type DefaultPreventionPolicyMacSensorAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyMacSensorAntiMalwareArgs

type DefaultPreventionPolicyMacSensorAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyMacSensorAntiMalwareArgs) ElementType

func (DefaultPreventionPolicyMacSensorAntiMalwareArgs) ToDefaultPreventionPolicyMacSensorAntiMalwareOutput

func (i DefaultPreventionPolicyMacSensorAntiMalwareArgs) ToDefaultPreventionPolicyMacSensorAntiMalwareOutput() DefaultPreventionPolicyMacSensorAntiMalwareOutput

func (DefaultPreventionPolicyMacSensorAntiMalwareArgs) ToDefaultPreventionPolicyMacSensorAntiMalwareOutputWithContext

func (i DefaultPreventionPolicyMacSensorAntiMalwareArgs) ToDefaultPreventionPolicyMacSensorAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAntiMalwareOutput

func (DefaultPreventionPolicyMacSensorAntiMalwareArgs) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutput

func (i DefaultPreventionPolicyMacSensorAntiMalwareArgs) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutput() DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput

func (DefaultPreventionPolicyMacSensorAntiMalwareArgs) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext

func (i DefaultPreventionPolicyMacSensorAntiMalwareArgs) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyMacSensorAntiMalwareInput

type DefaultPreventionPolicyMacSensorAntiMalwareInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacSensorAntiMalwareOutput() DefaultPreventionPolicyMacSensorAntiMalwareOutput
	ToDefaultPreventionPolicyMacSensorAntiMalwareOutputWithContext(context.Context) DefaultPreventionPolicyMacSensorAntiMalwareOutput
}

DefaultPreventionPolicyMacSensorAntiMalwareInput is an input type that accepts DefaultPreventionPolicyMacSensorAntiMalwareArgs and DefaultPreventionPolicyMacSensorAntiMalwareOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacSensorAntiMalwareInput` via:

DefaultPreventionPolicyMacSensorAntiMalwareArgs{...}

type DefaultPreventionPolicyMacSensorAntiMalwareOutput

type DefaultPreventionPolicyMacSensorAntiMalwareOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacSensorAntiMalwareOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyMacSensorAntiMalwareOutput) ElementType

func (DefaultPreventionPolicyMacSensorAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyMacSensorAntiMalwareOutput) ToDefaultPreventionPolicyMacSensorAntiMalwareOutput

func (o DefaultPreventionPolicyMacSensorAntiMalwareOutput) ToDefaultPreventionPolicyMacSensorAntiMalwareOutput() DefaultPreventionPolicyMacSensorAntiMalwareOutput

func (DefaultPreventionPolicyMacSensorAntiMalwareOutput) ToDefaultPreventionPolicyMacSensorAntiMalwareOutputWithContext

func (o DefaultPreventionPolicyMacSensorAntiMalwareOutput) ToDefaultPreventionPolicyMacSensorAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAntiMalwareOutput

func (DefaultPreventionPolicyMacSensorAntiMalwareOutput) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutput

func (o DefaultPreventionPolicyMacSensorAntiMalwareOutput) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutput() DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput

func (DefaultPreventionPolicyMacSensorAntiMalwareOutput) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyMacSensorAntiMalwareOutput) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyMacSensorAntiMalwarePtrInput

type DefaultPreventionPolicyMacSensorAntiMalwarePtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutput() DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput
	ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext(context.Context) DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput
}

DefaultPreventionPolicyMacSensorAntiMalwarePtrInput is an input type that accepts DefaultPreventionPolicyMacSensorAntiMalwareArgs, DefaultPreventionPolicyMacSensorAntiMalwarePtr and DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyMacSensorAntiMalwarePtrInput` via:

        DefaultPreventionPolicyMacSensorAntiMalwareArgs{...}

or:

        nil

type DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput) Elem

func (DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput) ElementType

func (DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutput

func (DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput) ToDefaultPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyMacSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyMacState

type DefaultPreventionPolicyMacState struct {
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	CloudAdwareAndPup DefaultPreventionPolicyMacCloudAdwareAndPupPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware DefaultPreventionPolicyMacCloudAntiMalwarePtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. A process with behaviors indicative of the Empyre Backdoor was terminated.
	EmpyreBackdoor pulumi.BoolPtrInput
	// Whether to enable the setting. An attempt to dump a user’s hashed password was blocked.
	HashCollector pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. An attempt to recover a plaintext password via the kcpassword file was blocked.
	KcPasswordDecoded pulumi.BoolPtrInput
	LastUpdated       pulumi.StringPtrInput
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. See these messages in Console.app by searching for Process: Falcon Notifications.
	NotifyEndUsers pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolPtrInput
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent adware and potentially unwanted programs (PUP).
	SensorAdwareAndPup DefaultPreventionPolicyMacSensorAdwareAndPupPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware DefaultPreventionPolicyMacSensorAntiMalwarePtrInput
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. The execution of an XPCOM shell was blocked.
	XpcomShell pulumi.BoolPtrInput
}

func (DefaultPreventionPolicyMacState) ElementType

type DefaultPreventionPolicyWindows

type DefaultPreventionPolicyWindows struct {
	pulumi.CustomResourceState

	// Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	AdditionalUserModeData pulumi.BoolOutput `pulumi:"additionalUserModeData"`
	// Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.
	AdvancedRemediation pulumi.BoolOutput `pulumi:"advancedRemediation"`
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	AdwareAndPup DefaultPreventionPolicyWindowsAdwareAndPupOutput `pulumi:"adwareAndPup"`
	// Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.
	ApplicationExploitationActivity pulumi.BoolOutput `pulumi:"applicationExploitationActivity"`
	// Whether to enable the setting. Deletion of backups often indicative of ransomware activity.
	BackupDeletion pulumi.BoolOutput `pulumi:"backupDeletion"`
	// Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.
	BiosDeepVisibility pulumi.BoolOutput `pulumi:"biosDeepVisibility"`
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolOutput `pulumi:"chopperWebshell"`
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware DefaultPreventionPolicyWindowsCloudAntiMalwareOutput `pulumi:"cloudAntiMalware"`
	// Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	CloudAntiMalwareMicrosoftOfficeFiles DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput `pulumi:"cloudAntiMalwareMicrosoftOfficeFiles"`
	// For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.
	CloudAntiMalwareUserInitiated DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput `pulumi:"cloudAntiMalwareUserInitiated"`
	// Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional*user*mode_data to be enabled.
	CodeInjection pulumi.BoolOutput `pulumi:"codeInjection"`
	// Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional*user*mode_data to be enabled.
	CredentialDumping pulumi.BoolOutput `pulumi:"credentialDumping"`
	// Whether to enable the setting. A process associated with Cryptowall was blocked.
	Cryptowall pulumi.BoolOutput `pulumi:"cryptowall"`
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolOutput `pulumi:"customBlocking"`
	// Description of the prevention policy.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolOutput `pulumi:"detectOnWrite"`
	// Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.
	DriveByDownload pulumi.BoolOutput `pulumi:"driveByDownload"`
	// Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.
	DriverLoadPrevention pulumi.BoolOutput `pulumi:"driverLoadPrevention"`
	// Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreterOnly to be enabled.
	EngineFullVisibility pulumi.BoolOutput `pulumi:"engineFullVisibility"`
	// Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.
	EnhancedDllLoadVisibility pulumi.BoolOutput `pulumi:"enhancedDllLoadVisibility"`
	// Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.
	EnhancedExploitationVisibility pulumi.BoolOutput `pulumi:"enhancedExploitationVisibility"`
	// Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.
	EnhancedMlForLargerFiles pulumi.BoolOutput `pulumi:"enhancedMlForLargerFiles"`
	// Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	ExtendedUserModeData DefaultPreventionPolicyWindowsExtendedUserModeDataOutput `pulumi:"extendedUserModeData"`
	// Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.
	FileEncryption pulumi.BoolOutput `pulumi:"fileEncryption"`
	// Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.
	FileSystemAccess pulumi.BoolOutput `pulumi:"fileSystemAccess"`
	// Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity.  When disabled each user under active containment will be released and the File System Containment will enter a disabled mode
	FileSystemContainment pulumi.BoolOutput `pulumi:"fileSystemContainment"`
	// Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	ForceAslr pulumi.BoolOutput `pulumi:"forceAslr"`
	// Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional*user*mode_data to be enabled.
	ForceDep pulumi.BoolOutput `pulumi:"forceDep"`
	// Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.
	HardwareEnhancedExploitDetection pulumi.BoolOutput `pulumi:"hardwareEnhancedExploitDetection"`
	// Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	HeapSprayPreallocation pulumi.BoolOutput `pulumi:"heapSprayPreallocation"`
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.
	HttpDetections pulumi.BoolOutput `pulumi:"httpDetections"`
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolOutput `pulumi:"intelligenceSourcedThreats"`
	// Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.
	InterpreterOnly pulumi.BoolOutput `pulumi:"interpreterOnly"`
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayOutput `pulumi:"ioaRuleGroups"`
	// Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.
	JavascriptViaRundll32 pulumi.BoolOutput   `pulumi:"javascriptViaRundll32"`
	LastUpdated           pulumi.StringOutput `pulumi:"lastUpdated"`
	// Whether to enable the setting. A process determined to be associated with Locky was blocked.
	Locky pulumi.BoolOutput `pulumi:"locky"`
	// Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.
	MemoryScanning pulumi.BoolOutput `pulumi:"memoryScanning"`
	// Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.
	MemoryScanningScanWithCpu pulumi.BoolOutput `pulumi:"memoryScanningScanWithCpu"`
	// Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	MicrosoftOfficeFileSuspiciousMacroRemoval pulumi.BoolOutput `pulumi:"microsoftOfficeFileSuspiciousMacroRemoval"`
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.
	NotifyEndUsers pulumi.BoolOutput `pulumi:"notifyEndUsers"`
	// Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	NullPageAllocation pulumi.BoolOutput `pulumi:"nullPageAllocation"`
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolOutput `pulumi:"onWriteScriptFileVisibility"`
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolOutput `pulumi:"preventSuspiciousProcesses"`
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.
	QuarantineAndSecurityCenterRegistration pulumi.BoolOutput `pulumi:"quarantineAndSecurityCenterRegistration"`
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.
	QuarantineOnRemovableMedia pulumi.BoolOutput `pulumi:"quarantineOnRemovableMedia"`
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolOutput `pulumi:"quarantineOnWrite"`
	// Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.
	RedactHttpDetectionDetails pulumi.BoolOutput `pulumi:"redactHttpDetectionDetails"`
	// Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.
	ScriptBasedExecutionMonitoring pulumi.BoolOutput `pulumi:"scriptBasedExecutionMonitoring"`
	// Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	SehOverwriteProtection pulumi.BoolOutput `pulumi:"sehOverwriteProtection"`
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware DefaultPreventionPolicyWindowsSensorAntiMalwareOutput `pulumi:"sensorAntiMalware"`
	// For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.
	SensorAntiMalwareUserInitiated DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput `pulumi:"sensorAntiMalwareUserInitiated"`
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolOutput `pulumi:"sensorTamperingProtection"`
	// Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.
	SuspiciousRegistryOperations pulumi.BoolOutput `pulumi:"suspiciousRegistryOperations"`
	// Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.
	SuspiciousScriptsAndCommands pulumi.BoolOutput `pulumi:"suspiciousScriptsAndCommands"`
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolOutput `pulumi:"uploadUnknownDetectionRelatedExecutables"`
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolOutput `pulumi:"uploadUnknownExecutables"`
	// Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.
	UsbInsertionTriggeredScan pulumi.BoolOutput `pulumi:"usbInsertionTriggeredScan"`
	// Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.
	VolumeShadowCopyAudit pulumi.BoolOutput `pulumi:"volumeShadowCopyAudit"`
	// Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume*shadow*copy_audit.
	VolumeShadowCopyProtect pulumi.BoolOutput `pulumi:"volumeShadowCopyProtect"`
	// Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver*load*prevention.
	VulnerableDriverProtection pulumi.BoolOutput `pulumi:"vulnerableDriverProtection"`
	// Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.
	WindowsLogonBypassStickyKeys pulumi.BoolOutput `pulumi:"windowsLogonBypassStickyKeys"`
}

This resource allows you to manage the default prevention policy for Windows hosts. Prevention policies allow you to manage what activity will trigger detections and preventions on your hosts. Destruction of this resource *will not* delete the default prevention policy or remove any configured settings.

## API Scopes

The following API scopes are required:

- Prevention policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_default, err := crowdstrike.NewDefaultPreventionPolicyWindows(ctx, "default", &crowdstrike.DefaultPreventionPolicyWindowsArgs{
			Description:   pulumi.String("managed by terraform"),
			IoaRuleGroups: pulumi.StringArray{},
			AdwareAndPup: &crowdstrike.DefaultPreventionPolicyWindowsAdwareAndPupArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			CloudAntiMalwareMicrosoftOfficeFiles: &crowdstrike.DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("DISABLED"),
			},
			CloudAntiMalware: &crowdstrike.DefaultPreventionPolicyWindowsCloudAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			CloudAntiMalwareUserInitiated: &crowdstrike.DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAntiMalware: &crowdstrike.DefaultPreventionPolicyWindowsSensorAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAntiMalwareUserInitiated: &crowdstrike.DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			ExtendedUserModeData: &crowdstrike.DefaultPreventionPolicyWindowsExtendedUserModeDataArgs{
				Detection: pulumi.String("MODERATE"),
			},
			UsbInsertionTriggeredScan:                 pulumi.Bool(true),
			ApplicationExploitationActivity:           pulumi.Bool(true),
			AdditionalUserModeData:                    pulumi.Bool(true),
			NotifyEndUsers:                            pulumi.Bool(true),
			AdvancedRemediation:                       pulumi.Bool(true),
			BackupDeletion:                            pulumi.Bool(true),
			BiosDeepVisibility:                        pulumi.Bool(true),
			ChopperWebshell:                           pulumi.Bool(true),
			CodeInjection:                             pulumi.Bool(true),
			CredentialDumping:                         pulumi.Bool(true),
			Cryptowall:                                pulumi.Bool(true),
			CustomBlocking:                            pulumi.Bool(true),
			DetectOnWrite:                             pulumi.Bool(true),
			DriveByDownload:                           pulumi.Bool(true),
			DriverLoadPrevention:                      pulumi.Bool(true),
			InterpreterOnly:                           pulumi.Bool(true),
			EngineFullVisibility:                      pulumi.Bool(true),
			EnhancedExploitationVisibility:            pulumi.Bool(true),
			EnhancedDllLoadVisibility:                 pulumi.Bool(true),
			EnhancedMlForLargerFiles:                  pulumi.Bool(true),
			FileEncryption:                            pulumi.Bool(true),
			FileSystemAccess:                          pulumi.Bool(true),
			ForceAslr:                                 pulumi.Bool(true),
			ForceDep:                                  pulumi.Bool(true),
			HeapSprayPreallocation:                    pulumi.Bool(true),
			NullPageAllocation:                        pulumi.Bool(true),
			SehOverwriteProtection:                    pulumi.Bool(true),
			HardwareEnhancedExploitDetection:          pulumi.Bool(true),
			HttpDetections:                            pulumi.Bool(true),
			RedactHttpDetectionDetails:                pulumi.Bool(true),
			IntelligenceSourcedThreats:                pulumi.Bool(true),
			JavascriptViaRundll32:                     pulumi.Bool(true),
			Locky:                                     pulumi.Bool(true),
			MemoryScanning:                            pulumi.Bool(true),
			MemoryScanningScanWithCpu:                 pulumi.Bool(true),
			MicrosoftOfficeFileSuspiciousMacroRemoval: pulumi.Bool(true),
			OnWriteScriptFileVisibility:               pulumi.Bool(true),
			PreventSuspiciousProcesses:                pulumi.Bool(true),
			QuarantineAndSecurityCenterRegistration:   pulumi.Bool(true),
			QuarantineOnRemovableMedia:                pulumi.Bool(true),
			QuarantineOnWrite:                         pulumi.Bool(true),
			ScriptBasedExecutionMonitoring:            pulumi.Bool(true),
			SensorTamperingProtection:                 pulumi.Bool(true),
			SuspiciousRegistryOperations:              pulumi.Bool(true),
			SuspiciousScriptsAndCommands:              pulumi.Bool(true),
			UploadUnknownExecutables:                  pulumi.Bool(true),
			UploadUnknownDetectionRelatedExecutables:  pulumi.Bool(true),
			VolumeShadowCopyAudit:                     pulumi.Bool(true),
			VolumeShadowCopyProtect:                   pulumi.Bool(true),
			VulnerableDriverProtection:                pulumi.Bool(true),
			WindowsLogonBypassStickyKeys:              pulumi.Bool(true),
			FileSystemContainment:                     pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		ctx.Export("defaultPreventionPolicyWindows", _default)
		return nil
	})
}

```

## Import

The linux default prevention policy can be imported by specifying the id.

```sh $ pulumi import crowdstrike:index/defaultPreventionPolicyWindows:DefaultPreventionPolicyWindows default 7fb858a949034a0cbca175f660f1e769 ```

func GetDefaultPreventionPolicyWindows

func GetDefaultPreventionPolicyWindows(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DefaultPreventionPolicyWindowsState, opts ...pulumi.ResourceOption) (*DefaultPreventionPolicyWindows, error)

GetDefaultPreventionPolicyWindows gets an existing DefaultPreventionPolicyWindows resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDefaultPreventionPolicyWindows

func NewDefaultPreventionPolicyWindows(ctx *pulumi.Context,
	name string, args *DefaultPreventionPolicyWindowsArgs, opts ...pulumi.ResourceOption) (*DefaultPreventionPolicyWindows, error)

NewDefaultPreventionPolicyWindows registers a new resource with the given unique name, arguments, and options.

func (*DefaultPreventionPolicyWindows) ElementType

func (*DefaultPreventionPolicyWindows) ToDefaultPreventionPolicyWindowsOutput

func (i *DefaultPreventionPolicyWindows) ToDefaultPreventionPolicyWindowsOutput() DefaultPreventionPolicyWindowsOutput

func (*DefaultPreventionPolicyWindows) ToDefaultPreventionPolicyWindowsOutputWithContext

func (i *DefaultPreventionPolicyWindows) ToDefaultPreventionPolicyWindowsOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsOutput

type DefaultPreventionPolicyWindowsAdwareAndPup

type DefaultPreventionPolicyWindowsAdwareAndPup struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyWindowsAdwareAndPupArgs

type DefaultPreventionPolicyWindowsAdwareAndPupArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyWindowsAdwareAndPupArgs) ElementType

func (DefaultPreventionPolicyWindowsAdwareAndPupArgs) ToDefaultPreventionPolicyWindowsAdwareAndPupOutput

func (i DefaultPreventionPolicyWindowsAdwareAndPupArgs) ToDefaultPreventionPolicyWindowsAdwareAndPupOutput() DefaultPreventionPolicyWindowsAdwareAndPupOutput

func (DefaultPreventionPolicyWindowsAdwareAndPupArgs) ToDefaultPreventionPolicyWindowsAdwareAndPupOutputWithContext

func (i DefaultPreventionPolicyWindowsAdwareAndPupArgs) ToDefaultPreventionPolicyWindowsAdwareAndPupOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsAdwareAndPupOutput

func (DefaultPreventionPolicyWindowsAdwareAndPupArgs) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

func (i DefaultPreventionPolicyWindowsAdwareAndPupArgs) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutput() DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

func (DefaultPreventionPolicyWindowsAdwareAndPupArgs) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext

func (i DefaultPreventionPolicyWindowsAdwareAndPupArgs) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

type DefaultPreventionPolicyWindowsAdwareAndPupInput

type DefaultPreventionPolicyWindowsAdwareAndPupInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsAdwareAndPupOutput() DefaultPreventionPolicyWindowsAdwareAndPupOutput
	ToDefaultPreventionPolicyWindowsAdwareAndPupOutputWithContext(context.Context) DefaultPreventionPolicyWindowsAdwareAndPupOutput
}

DefaultPreventionPolicyWindowsAdwareAndPupInput is an input type that accepts DefaultPreventionPolicyWindowsAdwareAndPupArgs and DefaultPreventionPolicyWindowsAdwareAndPupOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsAdwareAndPupInput` via:

DefaultPreventionPolicyWindowsAdwareAndPupArgs{...}

type DefaultPreventionPolicyWindowsAdwareAndPupOutput

type DefaultPreventionPolicyWindowsAdwareAndPupOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsAdwareAndPupOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsAdwareAndPupOutput) ElementType

func (DefaultPreventionPolicyWindowsAdwareAndPupOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsAdwareAndPupOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupOutput

func (o DefaultPreventionPolicyWindowsAdwareAndPupOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupOutput() DefaultPreventionPolicyWindowsAdwareAndPupOutput

func (DefaultPreventionPolicyWindowsAdwareAndPupOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupOutputWithContext

func (o DefaultPreventionPolicyWindowsAdwareAndPupOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsAdwareAndPupOutput

func (DefaultPreventionPolicyWindowsAdwareAndPupOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

func (o DefaultPreventionPolicyWindowsAdwareAndPupOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutput() DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

func (DefaultPreventionPolicyWindowsAdwareAndPupOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext

func (o DefaultPreventionPolicyWindowsAdwareAndPupOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

type DefaultPreventionPolicyWindowsAdwareAndPupPtrInput

type DefaultPreventionPolicyWindowsAdwareAndPupPtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutput() DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput
	ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext(context.Context) DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput
}

DefaultPreventionPolicyWindowsAdwareAndPupPtrInput is an input type that accepts DefaultPreventionPolicyWindowsAdwareAndPupArgs, DefaultPreventionPolicyWindowsAdwareAndPupPtr and DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsAdwareAndPupPtrInput` via:

        DefaultPreventionPolicyWindowsAdwareAndPupArgs{...}

or:

        nil

type DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

type DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput) Elem

func (DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput) ElementType

func (DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

func (o DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutput() DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

func (DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext

func (o DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput) ToDefaultPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsAdwareAndPupPtrOutput

type DefaultPreventionPolicyWindowsArgs

type DefaultPreventionPolicyWindowsArgs struct {
	// Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	AdditionalUserModeData pulumi.BoolPtrInput
	// Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.
	AdvancedRemediation pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	AdwareAndPup DefaultPreventionPolicyWindowsAdwareAndPupPtrInput
	// Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.
	ApplicationExploitationActivity pulumi.BoolPtrInput
	// Whether to enable the setting. Deletion of backups often indicative of ransomware activity.
	BackupDeletion pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.
	BiosDeepVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware DefaultPreventionPolicyWindowsCloudAntiMalwarePtrInput
	// Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	CloudAntiMalwareMicrosoftOfficeFiles DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput
	// For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.
	CloudAntiMalwareUserInitiated DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput
	// Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional*user*mode_data to be enabled.
	CodeInjection pulumi.BoolPtrInput
	// Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional*user*mode_data to be enabled.
	CredentialDumping pulumi.BoolPtrInput
	// Whether to enable the setting. A process associated with Cryptowall was blocked.
	Cryptowall pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.
	DriveByDownload pulumi.BoolPtrInput
	// Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.
	DriverLoadPrevention pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreterOnly to be enabled.
	EngineFullVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.
	EnhancedDllLoadVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.
	EnhancedExploitationVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.
	EnhancedMlForLargerFiles pulumi.BoolPtrInput
	// Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	ExtendedUserModeData DefaultPreventionPolicyWindowsExtendedUserModeDataPtrInput
	// Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.
	FileEncryption pulumi.BoolPtrInput
	// Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.
	FileSystemAccess pulumi.BoolPtrInput
	// Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity.  When disabled each user under active containment will be released and the File System Containment will enter a disabled mode
	FileSystemContainment pulumi.BoolPtrInput
	// Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	ForceAslr pulumi.BoolPtrInput
	// Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional*user*mode_data to be enabled.
	ForceDep pulumi.BoolPtrInput
	// Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.
	HardwareEnhancedExploitDetection pulumi.BoolPtrInput
	// Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	HeapSprayPreallocation pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.
	HttpDetections pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.
	InterpreterOnly pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.
	JavascriptViaRundll32 pulumi.BoolPtrInput
	// Whether to enable the setting. A process determined to be associated with Locky was blocked.
	Locky pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.
	MemoryScanning pulumi.BoolPtrInput
	// Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.
	MemoryScanningScanWithCpu pulumi.BoolPtrInput
	// Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	MicrosoftOfficeFileSuspiciousMacroRemoval pulumi.BoolPtrInput
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.
	NotifyEndUsers pulumi.BoolPtrInput
	// Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	NullPageAllocation pulumi.BoolPtrInput
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.
	QuarantineAndSecurityCenterRegistration pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.
	QuarantineOnRemovableMedia pulumi.BoolPtrInput
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.
	RedactHttpDetectionDetails pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	SehOverwriteProtection pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware DefaultPreventionPolicyWindowsSensorAntiMalwarePtrInput
	// For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.
	SensorAntiMalwareUserInitiated DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.
	SuspiciousRegistryOperations pulumi.BoolPtrInput
	// Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.
	SuspiciousScriptsAndCommands pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.
	UsbInsertionTriggeredScan pulumi.BoolPtrInput
	// Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.
	VolumeShadowCopyAudit pulumi.BoolPtrInput
	// Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume*shadow*copy_audit.
	VolumeShadowCopyProtect pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver*load*prevention.
	VulnerableDriverProtection pulumi.BoolPtrInput
	// Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.
	WindowsLogonBypassStickyKeys pulumi.BoolPtrInput
}

The set of arguments for constructing a DefaultPreventionPolicyWindows resource.

func (DefaultPreventionPolicyWindowsArgs) ElementType

type DefaultPreventionPolicyWindowsArray

type DefaultPreventionPolicyWindowsArray []DefaultPreventionPolicyWindowsInput

func (DefaultPreventionPolicyWindowsArray) ElementType

func (DefaultPreventionPolicyWindowsArray) ToDefaultPreventionPolicyWindowsArrayOutput

func (i DefaultPreventionPolicyWindowsArray) ToDefaultPreventionPolicyWindowsArrayOutput() DefaultPreventionPolicyWindowsArrayOutput

func (DefaultPreventionPolicyWindowsArray) ToDefaultPreventionPolicyWindowsArrayOutputWithContext

func (i DefaultPreventionPolicyWindowsArray) ToDefaultPreventionPolicyWindowsArrayOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsArrayOutput

type DefaultPreventionPolicyWindowsArrayInput

type DefaultPreventionPolicyWindowsArrayInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsArrayOutput() DefaultPreventionPolicyWindowsArrayOutput
	ToDefaultPreventionPolicyWindowsArrayOutputWithContext(context.Context) DefaultPreventionPolicyWindowsArrayOutput
}

DefaultPreventionPolicyWindowsArrayInput is an input type that accepts DefaultPreventionPolicyWindowsArray and DefaultPreventionPolicyWindowsArrayOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsArrayInput` via:

DefaultPreventionPolicyWindowsArray{ DefaultPreventionPolicyWindowsArgs{...} }

type DefaultPreventionPolicyWindowsArrayOutput

type DefaultPreventionPolicyWindowsArrayOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsArrayOutput) ElementType

func (DefaultPreventionPolicyWindowsArrayOutput) Index

func (DefaultPreventionPolicyWindowsArrayOutput) ToDefaultPreventionPolicyWindowsArrayOutput

func (o DefaultPreventionPolicyWindowsArrayOutput) ToDefaultPreventionPolicyWindowsArrayOutput() DefaultPreventionPolicyWindowsArrayOutput

func (DefaultPreventionPolicyWindowsArrayOutput) ToDefaultPreventionPolicyWindowsArrayOutputWithContext

func (o DefaultPreventionPolicyWindowsArrayOutput) ToDefaultPreventionPolicyWindowsArrayOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsArrayOutput

type DefaultPreventionPolicyWindowsCloudAntiMalware

type DefaultPreventionPolicyWindowsCloudAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyWindowsCloudAntiMalwareArgs

type DefaultPreventionPolicyWindowsCloudAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyWindowsCloudAntiMalwareArgs) ElementType

func (DefaultPreventionPolicyWindowsCloudAntiMalwareArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareOutput

func (i DefaultPreventionPolicyWindowsCloudAntiMalwareArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareOutput() DefaultPreventionPolicyWindowsCloudAntiMalwareOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareOutputWithContext

func (i DefaultPreventionPolicyWindowsCloudAntiMalwareArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (i DefaultPreventionPolicyWindowsCloudAntiMalwareArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput() DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext

func (i DefaultPreventionPolicyWindowsCloudAntiMalwareArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareInput

type DefaultPreventionPolicyWindowsCloudAntiMalwareInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsCloudAntiMalwareOutput() DefaultPreventionPolicyWindowsCloudAntiMalwareOutput
	ToDefaultPreventionPolicyWindowsCloudAntiMalwareOutputWithContext(context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareOutput
}

DefaultPreventionPolicyWindowsCloudAntiMalwareInput is an input type that accepts DefaultPreventionPolicyWindowsCloudAntiMalwareArgs and DefaultPreventionPolicyWindowsCloudAntiMalwareOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsCloudAntiMalwareInput` via:

DefaultPreventionPolicyWindowsCloudAntiMalwareArgs{...}

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ElementType

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputWithContext

func (i DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext

func (i DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesInput

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput() DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput
	ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputWithContext(context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput
}

DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesInput is an input type that accepts DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs and DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesInput` via:

DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs{...}

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ElementType

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputWithContext

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext

func (o DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput() DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput
	ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext(context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput
}

DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput is an input type that accepts DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs, DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtr and DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput` via:

        DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs{...}

or:

        nil

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) Elem

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) ElementType

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext

type DefaultPreventionPolicyWindowsCloudAntiMalwareOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) ElementType

func (DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareOutputWithContext

func (o DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (o DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput() DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyWindowsCloudAntiMalwareOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwarePtrInput

type DefaultPreventionPolicyWindowsCloudAntiMalwarePtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput() DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput
	ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext(context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput
}

DefaultPreventionPolicyWindowsCloudAntiMalwarePtrInput is an input type that accepts DefaultPreventionPolicyWindowsCloudAntiMalwareArgs, DefaultPreventionPolicyWindowsCloudAntiMalwarePtr and DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsCloudAntiMalwarePtrInput` via:

        DefaultPreventionPolicyWindowsCloudAntiMalwareArgs{...}

or:

        nil

type DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput) Elem

func (DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput) ElementType

func (DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwarePtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ElementType

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext

func (i DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext

func (i DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedInput

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput() DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput
	ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext(context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput
}

DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedInput is an input type that accepts DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs and DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedInput` via:

DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs{...}

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ElementType

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext

func (o DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext

func (o DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput() DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput
	ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext(context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput
}

DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput is an input type that accepts DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs, DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtr and DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput` via:

        DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs{...}

or:

        nil

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

type DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) Elem

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) ElementType

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

func (DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext

func (o DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) ToDefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

type DefaultPreventionPolicyWindowsExtendedUserModeData

type DefaultPreventionPolicyWindowsExtendedUserModeData struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
}

type DefaultPreventionPolicyWindowsExtendedUserModeDataArgs

type DefaultPreventionPolicyWindowsExtendedUserModeDataArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
}

func (DefaultPreventionPolicyWindowsExtendedUserModeDataArgs) ElementType

func (DefaultPreventionPolicyWindowsExtendedUserModeDataArgs) ToDefaultPreventionPolicyWindowsExtendedUserModeDataOutput

func (DefaultPreventionPolicyWindowsExtendedUserModeDataArgs) ToDefaultPreventionPolicyWindowsExtendedUserModeDataOutputWithContext

func (i DefaultPreventionPolicyWindowsExtendedUserModeDataArgs) ToDefaultPreventionPolicyWindowsExtendedUserModeDataOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsExtendedUserModeDataOutput

func (DefaultPreventionPolicyWindowsExtendedUserModeDataArgs) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput

func (i DefaultPreventionPolicyWindowsExtendedUserModeDataArgs) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput() DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput

func (DefaultPreventionPolicyWindowsExtendedUserModeDataArgs) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext

func (i DefaultPreventionPolicyWindowsExtendedUserModeDataArgs) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput

type DefaultPreventionPolicyWindowsExtendedUserModeDataInput

type DefaultPreventionPolicyWindowsExtendedUserModeDataInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsExtendedUserModeDataOutput() DefaultPreventionPolicyWindowsExtendedUserModeDataOutput
	ToDefaultPreventionPolicyWindowsExtendedUserModeDataOutputWithContext(context.Context) DefaultPreventionPolicyWindowsExtendedUserModeDataOutput
}

DefaultPreventionPolicyWindowsExtendedUserModeDataInput is an input type that accepts DefaultPreventionPolicyWindowsExtendedUserModeDataArgs and DefaultPreventionPolicyWindowsExtendedUserModeDataOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsExtendedUserModeDataInput` via:

DefaultPreventionPolicyWindowsExtendedUserModeDataArgs{...}

type DefaultPreventionPolicyWindowsExtendedUserModeDataOutput

type DefaultPreventionPolicyWindowsExtendedUserModeDataOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsExtendedUserModeDataOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsExtendedUserModeDataOutput) ElementType

func (DefaultPreventionPolicyWindowsExtendedUserModeDataOutput) ToDefaultPreventionPolicyWindowsExtendedUserModeDataOutput

func (DefaultPreventionPolicyWindowsExtendedUserModeDataOutput) ToDefaultPreventionPolicyWindowsExtendedUserModeDataOutputWithContext

func (o DefaultPreventionPolicyWindowsExtendedUserModeDataOutput) ToDefaultPreventionPolicyWindowsExtendedUserModeDataOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsExtendedUserModeDataOutput

func (DefaultPreventionPolicyWindowsExtendedUserModeDataOutput) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput

func (DefaultPreventionPolicyWindowsExtendedUserModeDataOutput) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext

func (o DefaultPreventionPolicyWindowsExtendedUserModeDataOutput) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput

type DefaultPreventionPolicyWindowsExtendedUserModeDataPtrInput

type DefaultPreventionPolicyWindowsExtendedUserModeDataPtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput() DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput
	ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext(context.Context) DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput
}

DefaultPreventionPolicyWindowsExtendedUserModeDataPtrInput is an input type that accepts DefaultPreventionPolicyWindowsExtendedUserModeDataArgs, DefaultPreventionPolicyWindowsExtendedUserModeDataPtr and DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsExtendedUserModeDataPtrInput` via:

        DefaultPreventionPolicyWindowsExtendedUserModeDataArgs{...}

or:

        nil

type DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput

type DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput) Elem

func (DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput) ElementType

func (DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput

func (DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext

func (o DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput) ToDefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsExtendedUserModeDataPtrOutput

type DefaultPreventionPolicyWindowsInput

type DefaultPreventionPolicyWindowsInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsOutput() DefaultPreventionPolicyWindowsOutput
	ToDefaultPreventionPolicyWindowsOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsOutput
}

type DefaultPreventionPolicyWindowsMap

type DefaultPreventionPolicyWindowsMap map[string]DefaultPreventionPolicyWindowsInput

func (DefaultPreventionPolicyWindowsMap) ElementType

func (DefaultPreventionPolicyWindowsMap) ToDefaultPreventionPolicyWindowsMapOutput

func (i DefaultPreventionPolicyWindowsMap) ToDefaultPreventionPolicyWindowsMapOutput() DefaultPreventionPolicyWindowsMapOutput

func (DefaultPreventionPolicyWindowsMap) ToDefaultPreventionPolicyWindowsMapOutputWithContext

func (i DefaultPreventionPolicyWindowsMap) ToDefaultPreventionPolicyWindowsMapOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsMapOutput

type DefaultPreventionPolicyWindowsMapInput

type DefaultPreventionPolicyWindowsMapInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsMapOutput() DefaultPreventionPolicyWindowsMapOutput
	ToDefaultPreventionPolicyWindowsMapOutputWithContext(context.Context) DefaultPreventionPolicyWindowsMapOutput
}

DefaultPreventionPolicyWindowsMapInput is an input type that accepts DefaultPreventionPolicyWindowsMap and DefaultPreventionPolicyWindowsMapOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsMapInput` via:

DefaultPreventionPolicyWindowsMap{ "key": DefaultPreventionPolicyWindowsArgs{...} }

type DefaultPreventionPolicyWindowsMapOutput

type DefaultPreventionPolicyWindowsMapOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsMapOutput) ElementType

func (DefaultPreventionPolicyWindowsMapOutput) MapIndex

func (DefaultPreventionPolicyWindowsMapOutput) ToDefaultPreventionPolicyWindowsMapOutput

func (o DefaultPreventionPolicyWindowsMapOutput) ToDefaultPreventionPolicyWindowsMapOutput() DefaultPreventionPolicyWindowsMapOutput

func (DefaultPreventionPolicyWindowsMapOutput) ToDefaultPreventionPolicyWindowsMapOutputWithContext

func (o DefaultPreventionPolicyWindowsMapOutput) ToDefaultPreventionPolicyWindowsMapOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsMapOutput

type DefaultPreventionPolicyWindowsOutput

type DefaultPreventionPolicyWindowsOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsOutput) AdditionalUserModeData

func (o DefaultPreventionPolicyWindowsOutput) AdditionalUserModeData() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.

func (DefaultPreventionPolicyWindowsOutput) AdvancedRemediation

func (o DefaultPreventionPolicyWindowsOutput) AdvancedRemediation() pulumi.BoolOutput

Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.

func (DefaultPreventionPolicyWindowsOutput) AdwareAndPup

Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.

func (DefaultPreventionPolicyWindowsOutput) ApplicationExploitationActivity

func (o DefaultPreventionPolicyWindowsOutput) ApplicationExploitationActivity() pulumi.BoolOutput

Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.

func (DefaultPreventionPolicyWindowsOutput) BackupDeletion

Whether to enable the setting. Deletion of backups often indicative of ransomware activity.

func (DefaultPreventionPolicyWindowsOutput) BiosDeepVisibility

Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.

func (DefaultPreventionPolicyWindowsOutput) ChopperWebshell

Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.

func (DefaultPreventionPolicyWindowsOutput) CloudAntiMalware

Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.

func (DefaultPreventionPolicyWindowsOutput) CloudAntiMalwareMicrosoftOfficeFiles

Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host

func (DefaultPreventionPolicyWindowsOutput) CloudAntiMalwareUserInitiated

For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.

func (DefaultPreventionPolicyWindowsOutput) CodeInjection

Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional*user*mode_data to be enabled.

func (DefaultPreventionPolicyWindowsOutput) CredentialDumping

Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional*user*mode_data to be enabled.

func (DefaultPreventionPolicyWindowsOutput) Cryptowall

Whether to enable the setting. A process associated with Cryptowall was blocked.

func (DefaultPreventionPolicyWindowsOutput) CustomBlocking

Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".

func (DefaultPreventionPolicyWindowsOutput) Description

Description of the prevention policy.

func (DefaultPreventionPolicyWindowsOutput) DetectOnWrite

Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.

func (DefaultPreventionPolicyWindowsOutput) DriveByDownload

Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.

func (DefaultPreventionPolicyWindowsOutput) DriverLoadPrevention

func (o DefaultPreventionPolicyWindowsOutput) DriverLoadPrevention() pulumi.BoolOutput

Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.

func (DefaultPreventionPolicyWindowsOutput) ElementType

func (DefaultPreventionPolicyWindowsOutput) EngineFullVisibility

func (o DefaultPreventionPolicyWindowsOutput) EngineFullVisibility() pulumi.BoolOutput

Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreterOnly to be enabled.

func (DefaultPreventionPolicyWindowsOutput) EnhancedDllLoadVisibility

func (o DefaultPreventionPolicyWindowsOutput) EnhancedDllLoadVisibility() pulumi.BoolOutput

Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.

func (DefaultPreventionPolicyWindowsOutput) EnhancedExploitationVisibility

func (o DefaultPreventionPolicyWindowsOutput) EnhancedExploitationVisibility() pulumi.BoolOutput

Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.

func (DefaultPreventionPolicyWindowsOutput) EnhancedMlForLargerFiles

func (o DefaultPreventionPolicyWindowsOutput) EnhancedMlForLargerFiles() pulumi.BoolOutput

Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.

func (DefaultPreventionPolicyWindowsOutput) ExtendedUserModeData

Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.

func (DefaultPreventionPolicyWindowsOutput) FileEncryption

Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.

func (DefaultPreventionPolicyWindowsOutput) FileSystemAccess

Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.

func (DefaultPreventionPolicyWindowsOutput) FileSystemContainment

func (o DefaultPreventionPolicyWindowsOutput) FileSystemContainment() pulumi.BoolOutput

Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity. When disabled each user under active containment will be released and the File System Containment will enter a disabled mode

func (DefaultPreventionPolicyWindowsOutput) ForceAslr

Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.

func (DefaultPreventionPolicyWindowsOutput) ForceDep

Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional*user*mode_data to be enabled.

func (DefaultPreventionPolicyWindowsOutput) HardwareEnhancedExploitDetection

func (o DefaultPreventionPolicyWindowsOutput) HardwareEnhancedExploitDetection() pulumi.BoolOutput

Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.

func (DefaultPreventionPolicyWindowsOutput) HeapSprayPreallocation

func (o DefaultPreventionPolicyWindowsOutput) HeapSprayPreallocation() pulumi.BoolOutput

Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.

func (DefaultPreventionPolicyWindowsOutput) HttpDetections

Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.

func (DefaultPreventionPolicyWindowsOutput) IntelligenceSourcedThreats

func (o DefaultPreventionPolicyWindowsOutput) IntelligenceSourcedThreats() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.

func (DefaultPreventionPolicyWindowsOutput) InterpreterOnly

Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.

func (DefaultPreventionPolicyWindowsOutput) IoaRuleGroups

IOA Rule Group to attach to the prevention policy.

func (DefaultPreventionPolicyWindowsOutput) JavascriptViaRundll32

func (o DefaultPreventionPolicyWindowsOutput) JavascriptViaRundll32() pulumi.BoolOutput

Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.

func (DefaultPreventionPolicyWindowsOutput) LastUpdated

func (DefaultPreventionPolicyWindowsOutput) Locky

Whether to enable the setting. A process determined to be associated with Locky was blocked.

func (DefaultPreventionPolicyWindowsOutput) MemoryScanning

Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.

func (DefaultPreventionPolicyWindowsOutput) MemoryScanningScanWithCpu

func (o DefaultPreventionPolicyWindowsOutput) MemoryScanningScanWithCpu() pulumi.BoolOutput

Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.

func (DefaultPreventionPolicyWindowsOutput) MicrosoftOfficeFileSuspiciousMacroRemoval

func (o DefaultPreventionPolicyWindowsOutput) MicrosoftOfficeFileSuspiciousMacroRemoval() pulumi.BoolOutput

Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host

func (DefaultPreventionPolicyWindowsOutput) NotifyEndUsers

Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.

func (DefaultPreventionPolicyWindowsOutput) NullPageAllocation

Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.

func (DefaultPreventionPolicyWindowsOutput) OnWriteScriptFileVisibility

func (o DefaultPreventionPolicyWindowsOutput) OnWriteScriptFileVisibility() pulumi.BoolOutput

Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.

func (DefaultPreventionPolicyWindowsOutput) PreventSuspiciousProcesses

func (o DefaultPreventionPolicyWindowsOutput) PreventSuspiciousProcesses() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.

func (DefaultPreventionPolicyWindowsOutput) QuarantineAndSecurityCenterRegistration

func (o DefaultPreventionPolicyWindowsOutput) QuarantineAndSecurityCenterRegistration() pulumi.BoolOutput

Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.

func (DefaultPreventionPolicyWindowsOutput) QuarantineOnRemovableMedia

func (o DefaultPreventionPolicyWindowsOutput) QuarantineOnRemovableMedia() pulumi.BoolOutput

Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.

func (DefaultPreventionPolicyWindowsOutput) QuarantineOnWrite

Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.

func (DefaultPreventionPolicyWindowsOutput) RedactHttpDetectionDetails

func (o DefaultPreventionPolicyWindowsOutput) RedactHttpDetectionDetails() pulumi.BoolOutput

Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.

func (DefaultPreventionPolicyWindowsOutput) ScriptBasedExecutionMonitoring

func (o DefaultPreventionPolicyWindowsOutput) ScriptBasedExecutionMonitoring() pulumi.BoolOutput

Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.

func (DefaultPreventionPolicyWindowsOutput) SehOverwriteProtection

func (o DefaultPreventionPolicyWindowsOutput) SehOverwriteProtection() pulumi.BoolOutput

Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.

func (DefaultPreventionPolicyWindowsOutput) SensorAntiMalware

For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.

func (DefaultPreventionPolicyWindowsOutput) SensorAntiMalwareUserInitiated

For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.

func (DefaultPreventionPolicyWindowsOutput) SensorTamperingProtection

func (o DefaultPreventionPolicyWindowsOutput) SensorTamperingProtection() pulumi.BoolOutput

Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.

func (DefaultPreventionPolicyWindowsOutput) SuspiciousRegistryOperations

func (o DefaultPreventionPolicyWindowsOutput) SuspiciousRegistryOperations() pulumi.BoolOutput

Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.

func (DefaultPreventionPolicyWindowsOutput) SuspiciousScriptsAndCommands

func (o DefaultPreventionPolicyWindowsOutput) SuspiciousScriptsAndCommands() pulumi.BoolOutput

Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.

func (DefaultPreventionPolicyWindowsOutput) ToDefaultPreventionPolicyWindowsOutput

func (o DefaultPreventionPolicyWindowsOutput) ToDefaultPreventionPolicyWindowsOutput() DefaultPreventionPolicyWindowsOutput

func (DefaultPreventionPolicyWindowsOutput) ToDefaultPreventionPolicyWindowsOutputWithContext

func (o DefaultPreventionPolicyWindowsOutput) ToDefaultPreventionPolicyWindowsOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsOutput

func (DefaultPreventionPolicyWindowsOutput) UploadUnknownDetectionRelatedExecutables

func (o DefaultPreventionPolicyWindowsOutput) UploadUnknownDetectionRelatedExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.

func (DefaultPreventionPolicyWindowsOutput) UploadUnknownExecutables

func (o DefaultPreventionPolicyWindowsOutput) UploadUnknownExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.

func (DefaultPreventionPolicyWindowsOutput) UsbInsertionTriggeredScan

func (o DefaultPreventionPolicyWindowsOutput) UsbInsertionTriggeredScan() pulumi.BoolOutput

Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.

func (DefaultPreventionPolicyWindowsOutput) VolumeShadowCopyAudit

func (o DefaultPreventionPolicyWindowsOutput) VolumeShadowCopyAudit() pulumi.BoolOutput

Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.

func (DefaultPreventionPolicyWindowsOutput) VolumeShadowCopyProtect

func (o DefaultPreventionPolicyWindowsOutput) VolumeShadowCopyProtect() pulumi.BoolOutput

Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume*shadow*copy_audit.

func (DefaultPreventionPolicyWindowsOutput) VulnerableDriverProtection

func (o DefaultPreventionPolicyWindowsOutput) VulnerableDriverProtection() pulumi.BoolOutput

Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver*load*prevention.

func (DefaultPreventionPolicyWindowsOutput) WindowsLogonBypassStickyKeys

func (o DefaultPreventionPolicyWindowsOutput) WindowsLogonBypassStickyKeys() pulumi.BoolOutput

Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.

type DefaultPreventionPolicyWindowsSensorAntiMalware

type DefaultPreventionPolicyWindowsSensorAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyWindowsSensorAntiMalwareArgs

type DefaultPreventionPolicyWindowsSensorAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyWindowsSensorAntiMalwareArgs) ElementType

func (DefaultPreventionPolicyWindowsSensorAntiMalwareArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareOutput

func (i DefaultPreventionPolicyWindowsSensorAntiMalwareArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareOutput() DefaultPreventionPolicyWindowsSensorAntiMalwareOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareOutputWithContext

func (i DefaultPreventionPolicyWindowsSensorAntiMalwareArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (i DefaultPreventionPolicyWindowsSensorAntiMalwareArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput() DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext

func (i DefaultPreventionPolicyWindowsSensorAntiMalwareArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyWindowsSensorAntiMalwareInput

type DefaultPreventionPolicyWindowsSensorAntiMalwareInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsSensorAntiMalwareOutput() DefaultPreventionPolicyWindowsSensorAntiMalwareOutput
	ToDefaultPreventionPolicyWindowsSensorAntiMalwareOutputWithContext(context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareOutput
}

DefaultPreventionPolicyWindowsSensorAntiMalwareInput is an input type that accepts DefaultPreventionPolicyWindowsSensorAntiMalwareArgs and DefaultPreventionPolicyWindowsSensorAntiMalwareOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsSensorAntiMalwareInput` via:

DefaultPreventionPolicyWindowsSensorAntiMalwareArgs{...}

type DefaultPreventionPolicyWindowsSensorAntiMalwareOutput

type DefaultPreventionPolicyWindowsSensorAntiMalwareOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) ElementType

func (DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareOutputWithContext

func (o DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (o DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput() DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyWindowsSensorAntiMalwareOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyWindowsSensorAntiMalwarePtrInput

type DefaultPreventionPolicyWindowsSensorAntiMalwarePtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput() DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput
	ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext(context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput
}

DefaultPreventionPolicyWindowsSensorAntiMalwarePtrInput is an input type that accepts DefaultPreventionPolicyWindowsSensorAntiMalwareArgs, DefaultPreventionPolicyWindowsSensorAntiMalwarePtr and DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsSensorAntiMalwarePtrInput` via:

        DefaultPreventionPolicyWindowsSensorAntiMalwareArgs{...}

or:

        nil

type DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput) Elem

func (DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput) ElementType

func (DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext

func (o DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwarePtrOutput

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ElementType

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext

func (i DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext

func (i DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedInput

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput() DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput
	ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext(context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput
}

DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedInput is an input type that accepts DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs and DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedInput` via:

DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs{...}

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ElementType

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext

func (o DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext

func (o DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput interface {
	pulumi.Input

	ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput() DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput
	ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext(context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput
}

DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput is an input type that accepts DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs, DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtr and DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput values. You can construct a concrete instance of `DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput` via:

        DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs{...}

or:

        nil

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

type DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput struct{ *pulumi.OutputState }

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) Detection

Machine learning level for detection.

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) Elem

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) ElementType

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) Prevention

Machine learning level for prevention.

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

func (DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext

func (o DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) ToDefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

type DefaultPreventionPolicyWindowsState

type DefaultPreventionPolicyWindowsState struct {
	// Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	AdditionalUserModeData pulumi.BoolPtrInput
	// Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.
	AdvancedRemediation pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	AdwareAndPup DefaultPreventionPolicyWindowsAdwareAndPupPtrInput
	// Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.
	ApplicationExploitationActivity pulumi.BoolPtrInput
	// Whether to enable the setting. Deletion of backups often indicative of ransomware activity.
	BackupDeletion pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.
	BiosDeepVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware DefaultPreventionPolicyWindowsCloudAntiMalwarePtrInput
	// Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	CloudAntiMalwareMicrosoftOfficeFiles DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput
	// For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.
	CloudAntiMalwareUserInitiated DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput
	// Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional*user*mode_data to be enabled.
	CodeInjection pulumi.BoolPtrInput
	// Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional*user*mode_data to be enabled.
	CredentialDumping pulumi.BoolPtrInput
	// Whether to enable the setting. A process associated with Cryptowall was blocked.
	Cryptowall pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.
	DriveByDownload pulumi.BoolPtrInput
	// Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.
	DriverLoadPrevention pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreterOnly to be enabled.
	EngineFullVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.
	EnhancedDllLoadVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.
	EnhancedExploitationVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.
	EnhancedMlForLargerFiles pulumi.BoolPtrInput
	// Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	ExtendedUserModeData DefaultPreventionPolicyWindowsExtendedUserModeDataPtrInput
	// Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.
	FileEncryption pulumi.BoolPtrInput
	// Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.
	FileSystemAccess pulumi.BoolPtrInput
	// Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity.  When disabled each user under active containment will be released and the File System Containment will enter a disabled mode
	FileSystemContainment pulumi.BoolPtrInput
	// Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	ForceAslr pulumi.BoolPtrInput
	// Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional*user*mode_data to be enabled.
	ForceDep pulumi.BoolPtrInput
	// Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.
	HardwareEnhancedExploitDetection pulumi.BoolPtrInput
	// Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	HeapSprayPreallocation pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.
	HttpDetections pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.
	InterpreterOnly pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.
	JavascriptViaRundll32 pulumi.BoolPtrInput
	LastUpdated           pulumi.StringPtrInput
	// Whether to enable the setting. A process determined to be associated with Locky was blocked.
	Locky pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.
	MemoryScanning pulumi.BoolPtrInput
	// Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.
	MemoryScanningScanWithCpu pulumi.BoolPtrInput
	// Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	MicrosoftOfficeFileSuspiciousMacroRemoval pulumi.BoolPtrInput
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.
	NotifyEndUsers pulumi.BoolPtrInput
	// Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	NullPageAllocation pulumi.BoolPtrInput
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.
	QuarantineAndSecurityCenterRegistration pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.
	QuarantineOnRemovableMedia pulumi.BoolPtrInput
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.
	RedactHttpDetectionDetails pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	SehOverwriteProtection pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware DefaultPreventionPolicyWindowsSensorAntiMalwarePtrInput
	// For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.
	SensorAntiMalwareUserInitiated DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.
	SuspiciousRegistryOperations pulumi.BoolPtrInput
	// Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.
	SuspiciousScriptsAndCommands pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.
	UsbInsertionTriggeredScan pulumi.BoolPtrInput
	// Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.
	VolumeShadowCopyAudit pulumi.BoolPtrInput
	// Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume*shadow*copy_audit.
	VolumeShadowCopyProtect pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver*load*prevention.
	VulnerableDriverProtection pulumi.BoolPtrInput
	// Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.
	WindowsLogonBypassStickyKeys pulumi.BoolPtrInput
}

func (DefaultPreventionPolicyWindowsState) ElementType

type DefaultSensorUpdatePolicy

type DefaultSensorUpdatePolicy struct {
	pulumi.CustomResourceState

	// Sensor build to use for the default sensor update policy.
	Build pulumi.StringOutput `pulumi:"build"`
	// Sensor arm64 build to use for the default sensor update policy (Linux only). Required if platformName is Linux.
	BuildArm64  pulumi.StringPtrOutput `pulumi:"buildArm64"`
	LastUpdated pulumi.StringOutput    `pulumi:"lastUpdated"`
	// Chooses which default sensor update policy to manage. (Windows, Mac, Linux)
	PlatformName pulumi.StringOutput `pulumi:"platformName"`
	// Prohibit sensor updates during a set of time blocks.
	Schedule DefaultSensorUpdatePolicyScheduleOutput `pulumi:"schedule"`
	// Enable uninstall protection. Windows and Mac only.
	UninstallProtection pulumi.BoolOutput `pulumi:"uninstallProtection"`
}

This resource allows management of the default sensor update policy in the CrowdStrike Falcon platform. Destruction of this resource *will not* delete the default sensor update policy or remove any configured settings.

## API Scopes

The following API scopes are required:

- Sensor update policies | Read & Write

## Import

A default sensor update policy can be imported by specifying the policy id.

```sh $ pulumi import crowdstrike:index/defaultSensorUpdatePolicy:DefaultSensorUpdatePolicy default 7fb858a949034a0cbca175f660f1e769 ```

func GetDefaultSensorUpdatePolicy

func GetDefaultSensorUpdatePolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DefaultSensorUpdatePolicyState, opts ...pulumi.ResourceOption) (*DefaultSensorUpdatePolicy, error)

GetDefaultSensorUpdatePolicy gets an existing DefaultSensorUpdatePolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDefaultSensorUpdatePolicy

func NewDefaultSensorUpdatePolicy(ctx *pulumi.Context,
	name string, args *DefaultSensorUpdatePolicyArgs, opts ...pulumi.ResourceOption) (*DefaultSensorUpdatePolicy, error)

NewDefaultSensorUpdatePolicy registers a new resource with the given unique name, arguments, and options.

func (*DefaultSensorUpdatePolicy) ElementType

func (*DefaultSensorUpdatePolicy) ElementType() reflect.Type

func (*DefaultSensorUpdatePolicy) ToDefaultSensorUpdatePolicyOutput

func (i *DefaultSensorUpdatePolicy) ToDefaultSensorUpdatePolicyOutput() DefaultSensorUpdatePolicyOutput

func (*DefaultSensorUpdatePolicy) ToDefaultSensorUpdatePolicyOutputWithContext

func (i *DefaultSensorUpdatePolicy) ToDefaultSensorUpdatePolicyOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyOutput

type DefaultSensorUpdatePolicyArgs

type DefaultSensorUpdatePolicyArgs struct {
	// Sensor build to use for the default sensor update policy.
	Build pulumi.StringInput
	// Sensor arm64 build to use for the default sensor update policy (Linux only). Required if platformName is Linux.
	BuildArm64 pulumi.StringPtrInput
	// Chooses which default sensor update policy to manage. (Windows, Mac, Linux)
	PlatformName pulumi.StringInput
	// Prohibit sensor updates during a set of time blocks.
	Schedule DefaultSensorUpdatePolicyScheduleInput
	// Enable uninstall protection. Windows and Mac only.
	UninstallProtection pulumi.BoolPtrInput
}

The set of arguments for constructing a DefaultSensorUpdatePolicy resource.

func (DefaultSensorUpdatePolicyArgs) ElementType

type DefaultSensorUpdatePolicyArray

type DefaultSensorUpdatePolicyArray []DefaultSensorUpdatePolicyInput

func (DefaultSensorUpdatePolicyArray) ElementType

func (DefaultSensorUpdatePolicyArray) ToDefaultSensorUpdatePolicyArrayOutput

func (i DefaultSensorUpdatePolicyArray) ToDefaultSensorUpdatePolicyArrayOutput() DefaultSensorUpdatePolicyArrayOutput

func (DefaultSensorUpdatePolicyArray) ToDefaultSensorUpdatePolicyArrayOutputWithContext

func (i DefaultSensorUpdatePolicyArray) ToDefaultSensorUpdatePolicyArrayOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyArrayOutput

type DefaultSensorUpdatePolicyArrayInput

type DefaultSensorUpdatePolicyArrayInput interface {
	pulumi.Input

	ToDefaultSensorUpdatePolicyArrayOutput() DefaultSensorUpdatePolicyArrayOutput
	ToDefaultSensorUpdatePolicyArrayOutputWithContext(context.Context) DefaultSensorUpdatePolicyArrayOutput
}

DefaultSensorUpdatePolicyArrayInput is an input type that accepts DefaultSensorUpdatePolicyArray and DefaultSensorUpdatePolicyArrayOutput values. You can construct a concrete instance of `DefaultSensorUpdatePolicyArrayInput` via:

DefaultSensorUpdatePolicyArray{ DefaultSensorUpdatePolicyArgs{...} }

type DefaultSensorUpdatePolicyArrayOutput

type DefaultSensorUpdatePolicyArrayOutput struct{ *pulumi.OutputState }

func (DefaultSensorUpdatePolicyArrayOutput) ElementType

func (DefaultSensorUpdatePolicyArrayOutput) Index

func (DefaultSensorUpdatePolicyArrayOutput) ToDefaultSensorUpdatePolicyArrayOutput

func (o DefaultSensorUpdatePolicyArrayOutput) ToDefaultSensorUpdatePolicyArrayOutput() DefaultSensorUpdatePolicyArrayOutput

func (DefaultSensorUpdatePolicyArrayOutput) ToDefaultSensorUpdatePolicyArrayOutputWithContext

func (o DefaultSensorUpdatePolicyArrayOutput) ToDefaultSensorUpdatePolicyArrayOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyArrayOutput

type DefaultSensorUpdatePolicyInput

type DefaultSensorUpdatePolicyInput interface {
	pulumi.Input

	ToDefaultSensorUpdatePolicyOutput() DefaultSensorUpdatePolicyOutput
	ToDefaultSensorUpdatePolicyOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyOutput
}

type DefaultSensorUpdatePolicyMap

type DefaultSensorUpdatePolicyMap map[string]DefaultSensorUpdatePolicyInput

func (DefaultSensorUpdatePolicyMap) ElementType

func (DefaultSensorUpdatePolicyMap) ToDefaultSensorUpdatePolicyMapOutput

func (i DefaultSensorUpdatePolicyMap) ToDefaultSensorUpdatePolicyMapOutput() DefaultSensorUpdatePolicyMapOutput

func (DefaultSensorUpdatePolicyMap) ToDefaultSensorUpdatePolicyMapOutputWithContext

func (i DefaultSensorUpdatePolicyMap) ToDefaultSensorUpdatePolicyMapOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyMapOutput

type DefaultSensorUpdatePolicyMapInput

type DefaultSensorUpdatePolicyMapInput interface {
	pulumi.Input

	ToDefaultSensorUpdatePolicyMapOutput() DefaultSensorUpdatePolicyMapOutput
	ToDefaultSensorUpdatePolicyMapOutputWithContext(context.Context) DefaultSensorUpdatePolicyMapOutput
}

DefaultSensorUpdatePolicyMapInput is an input type that accepts DefaultSensorUpdatePolicyMap and DefaultSensorUpdatePolicyMapOutput values. You can construct a concrete instance of `DefaultSensorUpdatePolicyMapInput` via:

DefaultSensorUpdatePolicyMap{ "key": DefaultSensorUpdatePolicyArgs{...} }

type DefaultSensorUpdatePolicyMapOutput

type DefaultSensorUpdatePolicyMapOutput struct{ *pulumi.OutputState }

func (DefaultSensorUpdatePolicyMapOutput) ElementType

func (DefaultSensorUpdatePolicyMapOutput) MapIndex

func (DefaultSensorUpdatePolicyMapOutput) ToDefaultSensorUpdatePolicyMapOutput

func (o DefaultSensorUpdatePolicyMapOutput) ToDefaultSensorUpdatePolicyMapOutput() DefaultSensorUpdatePolicyMapOutput

func (DefaultSensorUpdatePolicyMapOutput) ToDefaultSensorUpdatePolicyMapOutputWithContext

func (o DefaultSensorUpdatePolicyMapOutput) ToDefaultSensorUpdatePolicyMapOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyMapOutput

type DefaultSensorUpdatePolicyOutput

type DefaultSensorUpdatePolicyOutput struct{ *pulumi.OutputState }

func (DefaultSensorUpdatePolicyOutput) Build

Sensor build to use for the default sensor update policy.

func (DefaultSensorUpdatePolicyOutput) BuildArm64

Sensor arm64 build to use for the default sensor update policy (Linux only). Required if platformName is Linux.

func (DefaultSensorUpdatePolicyOutput) ElementType

func (DefaultSensorUpdatePolicyOutput) LastUpdated

func (DefaultSensorUpdatePolicyOutput) PlatformName

Chooses which default sensor update policy to manage. (Windows, Mac, Linux)

func (DefaultSensorUpdatePolicyOutput) Schedule

Prohibit sensor updates during a set of time blocks.

func (DefaultSensorUpdatePolicyOutput) ToDefaultSensorUpdatePolicyOutput

func (o DefaultSensorUpdatePolicyOutput) ToDefaultSensorUpdatePolicyOutput() DefaultSensorUpdatePolicyOutput

func (DefaultSensorUpdatePolicyOutput) ToDefaultSensorUpdatePolicyOutputWithContext

func (o DefaultSensorUpdatePolicyOutput) ToDefaultSensorUpdatePolicyOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyOutput

func (DefaultSensorUpdatePolicyOutput) UninstallProtection

func (o DefaultSensorUpdatePolicyOutput) UninstallProtection() pulumi.BoolOutput

Enable uninstall protection. Windows and Mac only.

type DefaultSensorUpdatePolicySchedule

type DefaultSensorUpdatePolicySchedule struct {
	// Enable the scheduler for sensor update policy.
	Enabled bool `pulumi:"enabled"`
	// The time block to prevent sensor updates. Only set when enabled is true.
	TimeBlocks []DefaultSensorUpdatePolicyScheduleTimeBlock `pulumi:"timeBlocks"`
	// The time zones that will be used for the time blocks. Only set when enabled is true.
	Timezone *string `pulumi:"timezone"`
}

type DefaultSensorUpdatePolicyScheduleArgs

type DefaultSensorUpdatePolicyScheduleArgs struct {
	// Enable the scheduler for sensor update policy.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The time block to prevent sensor updates. Only set when enabled is true.
	TimeBlocks DefaultSensorUpdatePolicyScheduleTimeBlockArrayInput `pulumi:"timeBlocks"`
	// The time zones that will be used for the time blocks. Only set when enabled is true.
	Timezone pulumi.StringPtrInput `pulumi:"timezone"`
}

func (DefaultSensorUpdatePolicyScheduleArgs) ElementType

func (DefaultSensorUpdatePolicyScheduleArgs) ToDefaultSensorUpdatePolicyScheduleOutput

func (i DefaultSensorUpdatePolicyScheduleArgs) ToDefaultSensorUpdatePolicyScheduleOutput() DefaultSensorUpdatePolicyScheduleOutput

func (DefaultSensorUpdatePolicyScheduleArgs) ToDefaultSensorUpdatePolicyScheduleOutputWithContext

func (i DefaultSensorUpdatePolicyScheduleArgs) ToDefaultSensorUpdatePolicyScheduleOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyScheduleOutput

func (DefaultSensorUpdatePolicyScheduleArgs) ToDefaultSensorUpdatePolicySchedulePtrOutput

func (i DefaultSensorUpdatePolicyScheduleArgs) ToDefaultSensorUpdatePolicySchedulePtrOutput() DefaultSensorUpdatePolicySchedulePtrOutput

func (DefaultSensorUpdatePolicyScheduleArgs) ToDefaultSensorUpdatePolicySchedulePtrOutputWithContext

func (i DefaultSensorUpdatePolicyScheduleArgs) ToDefaultSensorUpdatePolicySchedulePtrOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicySchedulePtrOutput

type DefaultSensorUpdatePolicyScheduleInput

type DefaultSensorUpdatePolicyScheduleInput interface {
	pulumi.Input

	ToDefaultSensorUpdatePolicyScheduleOutput() DefaultSensorUpdatePolicyScheduleOutput
	ToDefaultSensorUpdatePolicyScheduleOutputWithContext(context.Context) DefaultSensorUpdatePolicyScheduleOutput
}

DefaultSensorUpdatePolicyScheduleInput is an input type that accepts DefaultSensorUpdatePolicyScheduleArgs and DefaultSensorUpdatePolicyScheduleOutput values. You can construct a concrete instance of `DefaultSensorUpdatePolicyScheduleInput` via:

DefaultSensorUpdatePolicyScheduleArgs{...}

type DefaultSensorUpdatePolicyScheduleOutput

type DefaultSensorUpdatePolicyScheduleOutput struct{ *pulumi.OutputState }

func (DefaultSensorUpdatePolicyScheduleOutput) ElementType

func (DefaultSensorUpdatePolicyScheduleOutput) Enabled

Enable the scheduler for sensor update policy.

func (DefaultSensorUpdatePolicyScheduleOutput) TimeBlocks

The time block to prevent sensor updates. Only set when enabled is true.

func (DefaultSensorUpdatePolicyScheduleOutput) Timezone

The time zones that will be used for the time blocks. Only set when enabled is true.

func (DefaultSensorUpdatePolicyScheduleOutput) ToDefaultSensorUpdatePolicyScheduleOutput

func (o DefaultSensorUpdatePolicyScheduleOutput) ToDefaultSensorUpdatePolicyScheduleOutput() DefaultSensorUpdatePolicyScheduleOutput

func (DefaultSensorUpdatePolicyScheduleOutput) ToDefaultSensorUpdatePolicyScheduleOutputWithContext

func (o DefaultSensorUpdatePolicyScheduleOutput) ToDefaultSensorUpdatePolicyScheduleOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyScheduleOutput

func (DefaultSensorUpdatePolicyScheduleOutput) ToDefaultSensorUpdatePolicySchedulePtrOutput

func (o DefaultSensorUpdatePolicyScheduleOutput) ToDefaultSensorUpdatePolicySchedulePtrOutput() DefaultSensorUpdatePolicySchedulePtrOutput

func (DefaultSensorUpdatePolicyScheduleOutput) ToDefaultSensorUpdatePolicySchedulePtrOutputWithContext

func (o DefaultSensorUpdatePolicyScheduleOutput) ToDefaultSensorUpdatePolicySchedulePtrOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicySchedulePtrOutput

type DefaultSensorUpdatePolicySchedulePtrInput

type DefaultSensorUpdatePolicySchedulePtrInput interface {
	pulumi.Input

	ToDefaultSensorUpdatePolicySchedulePtrOutput() DefaultSensorUpdatePolicySchedulePtrOutput
	ToDefaultSensorUpdatePolicySchedulePtrOutputWithContext(context.Context) DefaultSensorUpdatePolicySchedulePtrOutput
}

DefaultSensorUpdatePolicySchedulePtrInput is an input type that accepts DefaultSensorUpdatePolicyScheduleArgs, DefaultSensorUpdatePolicySchedulePtr and DefaultSensorUpdatePolicySchedulePtrOutput values. You can construct a concrete instance of `DefaultSensorUpdatePolicySchedulePtrInput` via:

        DefaultSensorUpdatePolicyScheduleArgs{...}

or:

        nil

type DefaultSensorUpdatePolicySchedulePtrOutput

type DefaultSensorUpdatePolicySchedulePtrOutput struct{ *pulumi.OutputState }

func (DefaultSensorUpdatePolicySchedulePtrOutput) Elem

func (DefaultSensorUpdatePolicySchedulePtrOutput) ElementType

func (DefaultSensorUpdatePolicySchedulePtrOutput) Enabled

Enable the scheduler for sensor update policy.

func (DefaultSensorUpdatePolicySchedulePtrOutput) TimeBlocks

The time block to prevent sensor updates. Only set when enabled is true.

func (DefaultSensorUpdatePolicySchedulePtrOutput) Timezone

The time zones that will be used for the time blocks. Only set when enabled is true.

func (DefaultSensorUpdatePolicySchedulePtrOutput) ToDefaultSensorUpdatePolicySchedulePtrOutput

func (o DefaultSensorUpdatePolicySchedulePtrOutput) ToDefaultSensorUpdatePolicySchedulePtrOutput() DefaultSensorUpdatePolicySchedulePtrOutput

func (DefaultSensorUpdatePolicySchedulePtrOutput) ToDefaultSensorUpdatePolicySchedulePtrOutputWithContext

func (o DefaultSensorUpdatePolicySchedulePtrOutput) ToDefaultSensorUpdatePolicySchedulePtrOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicySchedulePtrOutput

type DefaultSensorUpdatePolicyScheduleTimeBlock

type DefaultSensorUpdatePolicyScheduleTimeBlock struct {
	// The days of the week the time block should be active.
	Days []string `pulumi:"days"`
	// The end time for the time block in 24HR format. Must be atleast 1 hour more than start_time.
	EndTime string `pulumi:"endTime"`
	// The start time for the time block in 24HR format. Must be atleast 1 hour before end_time.
	StartTime string `pulumi:"startTime"`
}

type DefaultSensorUpdatePolicyScheduleTimeBlockArgs

type DefaultSensorUpdatePolicyScheduleTimeBlockArgs struct {
	// The days of the week the time block should be active.
	Days pulumi.StringArrayInput `pulumi:"days"`
	// The end time for the time block in 24HR format. Must be atleast 1 hour more than start_time.
	EndTime pulumi.StringInput `pulumi:"endTime"`
	// The start time for the time block in 24HR format. Must be atleast 1 hour before end_time.
	StartTime pulumi.StringInput `pulumi:"startTime"`
}

func (DefaultSensorUpdatePolicyScheduleTimeBlockArgs) ElementType

func (DefaultSensorUpdatePolicyScheduleTimeBlockArgs) ToDefaultSensorUpdatePolicyScheduleTimeBlockOutput

func (i DefaultSensorUpdatePolicyScheduleTimeBlockArgs) ToDefaultSensorUpdatePolicyScheduleTimeBlockOutput() DefaultSensorUpdatePolicyScheduleTimeBlockOutput

func (DefaultSensorUpdatePolicyScheduleTimeBlockArgs) ToDefaultSensorUpdatePolicyScheduleTimeBlockOutputWithContext

func (i DefaultSensorUpdatePolicyScheduleTimeBlockArgs) ToDefaultSensorUpdatePolicyScheduleTimeBlockOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyScheduleTimeBlockOutput

type DefaultSensorUpdatePolicyScheduleTimeBlockArray

type DefaultSensorUpdatePolicyScheduleTimeBlockArray []DefaultSensorUpdatePolicyScheduleTimeBlockInput

func (DefaultSensorUpdatePolicyScheduleTimeBlockArray) ElementType

func (DefaultSensorUpdatePolicyScheduleTimeBlockArray) ToDefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput

func (i DefaultSensorUpdatePolicyScheduleTimeBlockArray) ToDefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput() DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput

func (DefaultSensorUpdatePolicyScheduleTimeBlockArray) ToDefaultSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext

func (i DefaultSensorUpdatePolicyScheduleTimeBlockArray) ToDefaultSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput

type DefaultSensorUpdatePolicyScheduleTimeBlockArrayInput

type DefaultSensorUpdatePolicyScheduleTimeBlockArrayInput interface {
	pulumi.Input

	ToDefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput() DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput
	ToDefaultSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext(context.Context) DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput
}

DefaultSensorUpdatePolicyScheduleTimeBlockArrayInput is an input type that accepts DefaultSensorUpdatePolicyScheduleTimeBlockArray and DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput values. You can construct a concrete instance of `DefaultSensorUpdatePolicyScheduleTimeBlockArrayInput` via:

DefaultSensorUpdatePolicyScheduleTimeBlockArray{ DefaultSensorUpdatePolicyScheduleTimeBlockArgs{...} }

type DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput

type DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput struct{ *pulumi.OutputState }

func (DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput) ElementType

func (DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput) Index

func (DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput) ToDefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput

func (DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput) ToDefaultSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext

func (o DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput) ToDefaultSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyScheduleTimeBlockArrayOutput

type DefaultSensorUpdatePolicyScheduleTimeBlockInput

type DefaultSensorUpdatePolicyScheduleTimeBlockInput interface {
	pulumi.Input

	ToDefaultSensorUpdatePolicyScheduleTimeBlockOutput() DefaultSensorUpdatePolicyScheduleTimeBlockOutput
	ToDefaultSensorUpdatePolicyScheduleTimeBlockOutputWithContext(context.Context) DefaultSensorUpdatePolicyScheduleTimeBlockOutput
}

DefaultSensorUpdatePolicyScheduleTimeBlockInput is an input type that accepts DefaultSensorUpdatePolicyScheduleTimeBlockArgs and DefaultSensorUpdatePolicyScheduleTimeBlockOutput values. You can construct a concrete instance of `DefaultSensorUpdatePolicyScheduleTimeBlockInput` via:

DefaultSensorUpdatePolicyScheduleTimeBlockArgs{...}

type DefaultSensorUpdatePolicyScheduleTimeBlockOutput

type DefaultSensorUpdatePolicyScheduleTimeBlockOutput struct{ *pulumi.OutputState }

func (DefaultSensorUpdatePolicyScheduleTimeBlockOutput) Days

The days of the week the time block should be active.

func (DefaultSensorUpdatePolicyScheduleTimeBlockOutput) ElementType

func (DefaultSensorUpdatePolicyScheduleTimeBlockOutput) EndTime

The end time for the time block in 24HR format. Must be atleast 1 hour more than start_time.

func (DefaultSensorUpdatePolicyScheduleTimeBlockOutput) StartTime

The start time for the time block in 24HR format. Must be atleast 1 hour before end_time.

func (DefaultSensorUpdatePolicyScheduleTimeBlockOutput) ToDefaultSensorUpdatePolicyScheduleTimeBlockOutput

func (o DefaultSensorUpdatePolicyScheduleTimeBlockOutput) ToDefaultSensorUpdatePolicyScheduleTimeBlockOutput() DefaultSensorUpdatePolicyScheduleTimeBlockOutput

func (DefaultSensorUpdatePolicyScheduleTimeBlockOutput) ToDefaultSensorUpdatePolicyScheduleTimeBlockOutputWithContext

func (o DefaultSensorUpdatePolicyScheduleTimeBlockOutput) ToDefaultSensorUpdatePolicyScheduleTimeBlockOutputWithContext(ctx context.Context) DefaultSensorUpdatePolicyScheduleTimeBlockOutput

type DefaultSensorUpdatePolicyState

type DefaultSensorUpdatePolicyState struct {
	// Sensor build to use for the default sensor update policy.
	Build pulumi.StringPtrInput
	// Sensor arm64 build to use for the default sensor update policy (Linux only). Required if platformName is Linux.
	BuildArm64  pulumi.StringPtrInput
	LastUpdated pulumi.StringPtrInput
	// Chooses which default sensor update policy to manage. (Windows, Mac, Linux)
	PlatformName pulumi.StringPtrInput
	// Prohibit sensor updates during a set of time blocks.
	Schedule DefaultSensorUpdatePolicySchedulePtrInput
	// Enable uninstall protection. Windows and Mac only.
	UninstallProtection pulumi.BoolPtrInput
}

func (DefaultSensorUpdatePolicyState) ElementType

type FilevantagePolicy

type FilevantagePolicy struct {
	pulumi.CustomResourceState

	// Description of the filevantage policy.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Enable the filevantage policy.
	Enabled pulumi.BoolOutput `pulumi:"enabled"`
	// Host Group ids to attach to the filevantage policy.
	HostGroups  pulumi.StringArrayOutput `pulumi:"hostGroups"`
	LastUpdated pulumi.StringOutput      `pulumi:"lastUpdated"`
	// Name of the filevantage policy.
	Name pulumi.StringOutput `pulumi:"name"`
	// Platform for the filevantage policy to manage. (Windows, Mac, Linux)
	PlatformName pulumi.StringOutput `pulumi:"platformName"`
	// Rule Group ids to attach to the filevantage policy. Precedence is based on the order of the list. Rule groups must be the same type as the policy.
	RuleGroups pulumi.StringArrayOutput `pulumi:"ruleGroups"`
	// Scheduled exclusions for the filevantage policy.
	ScheduledExclusions FilevantagePolicyScheduledExclusionArrayOutput `pulumi:"scheduledExclusions"`
}

This resource allows management of a FileVantage policy. A FileVantage policy is a collection of file integrity rules and rule groups that you can apply to host groups.

## API Scopes

The following API scopes are required:

- Falcon FileVantage | Read & Write

## Import

filvantage policy can be imported by specifying the policy id.

```sh $ pulumi import crowdstrike:index/filevantagePolicy:FilevantagePolicy example 7fb858a949034a0cbca175f660f1e769 ```

func GetFilevantagePolicy

func GetFilevantagePolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *FilevantagePolicyState, opts ...pulumi.ResourceOption) (*FilevantagePolicy, error)

GetFilevantagePolicy gets an existing FilevantagePolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewFilevantagePolicy

func NewFilevantagePolicy(ctx *pulumi.Context,
	name string, args *FilevantagePolicyArgs, opts ...pulumi.ResourceOption) (*FilevantagePolicy, error)

NewFilevantagePolicy registers a new resource with the given unique name, arguments, and options.

func (*FilevantagePolicy) ElementType

func (*FilevantagePolicy) ElementType() reflect.Type

func (*FilevantagePolicy) ToFilevantagePolicyOutput

func (i *FilevantagePolicy) ToFilevantagePolicyOutput() FilevantagePolicyOutput

func (*FilevantagePolicy) ToFilevantagePolicyOutputWithContext

func (i *FilevantagePolicy) ToFilevantagePolicyOutputWithContext(ctx context.Context) FilevantagePolicyOutput

type FilevantagePolicyArgs

type FilevantagePolicyArgs struct {
	// Description of the filevantage policy.
	Description pulumi.StringPtrInput
	// Enable the filevantage policy.
	Enabled pulumi.BoolPtrInput
	// Host Group ids to attach to the filevantage policy.
	HostGroups pulumi.StringArrayInput
	// Name of the filevantage policy.
	Name pulumi.StringPtrInput
	// Platform for the filevantage policy to manage. (Windows, Mac, Linux)
	PlatformName pulumi.StringInput
	// Rule Group ids to attach to the filevantage policy. Precedence is based on the order of the list. Rule groups must be the same type as the policy.
	RuleGroups pulumi.StringArrayInput
	// Scheduled exclusions for the filevantage policy.
	ScheduledExclusions FilevantagePolicyScheduledExclusionArrayInput
}

The set of arguments for constructing a FilevantagePolicy resource.

func (FilevantagePolicyArgs) ElementType

func (FilevantagePolicyArgs) ElementType() reflect.Type

type FilevantagePolicyArray

type FilevantagePolicyArray []FilevantagePolicyInput

func (FilevantagePolicyArray) ElementType

func (FilevantagePolicyArray) ElementType() reflect.Type

func (FilevantagePolicyArray) ToFilevantagePolicyArrayOutput

func (i FilevantagePolicyArray) ToFilevantagePolicyArrayOutput() FilevantagePolicyArrayOutput

func (FilevantagePolicyArray) ToFilevantagePolicyArrayOutputWithContext

func (i FilevantagePolicyArray) ToFilevantagePolicyArrayOutputWithContext(ctx context.Context) FilevantagePolicyArrayOutput

type FilevantagePolicyArrayInput

type FilevantagePolicyArrayInput interface {
	pulumi.Input

	ToFilevantagePolicyArrayOutput() FilevantagePolicyArrayOutput
	ToFilevantagePolicyArrayOutputWithContext(context.Context) FilevantagePolicyArrayOutput
}

FilevantagePolicyArrayInput is an input type that accepts FilevantagePolicyArray and FilevantagePolicyArrayOutput values. You can construct a concrete instance of `FilevantagePolicyArrayInput` via:

FilevantagePolicyArray{ FilevantagePolicyArgs{...} }

type FilevantagePolicyArrayOutput

type FilevantagePolicyArrayOutput struct{ *pulumi.OutputState }

func (FilevantagePolicyArrayOutput) ElementType

func (FilevantagePolicyArrayOutput) Index

func (FilevantagePolicyArrayOutput) ToFilevantagePolicyArrayOutput

func (o FilevantagePolicyArrayOutput) ToFilevantagePolicyArrayOutput() FilevantagePolicyArrayOutput

func (FilevantagePolicyArrayOutput) ToFilevantagePolicyArrayOutputWithContext

func (o FilevantagePolicyArrayOutput) ToFilevantagePolicyArrayOutputWithContext(ctx context.Context) FilevantagePolicyArrayOutput

type FilevantagePolicyInput

type FilevantagePolicyInput interface {
	pulumi.Input

	ToFilevantagePolicyOutput() FilevantagePolicyOutput
	ToFilevantagePolicyOutputWithContext(ctx context.Context) FilevantagePolicyOutput
}

type FilevantagePolicyMap

type FilevantagePolicyMap map[string]FilevantagePolicyInput

func (FilevantagePolicyMap) ElementType

func (FilevantagePolicyMap) ElementType() reflect.Type

func (FilevantagePolicyMap) ToFilevantagePolicyMapOutput

func (i FilevantagePolicyMap) ToFilevantagePolicyMapOutput() FilevantagePolicyMapOutput

func (FilevantagePolicyMap) ToFilevantagePolicyMapOutputWithContext

func (i FilevantagePolicyMap) ToFilevantagePolicyMapOutputWithContext(ctx context.Context) FilevantagePolicyMapOutput

type FilevantagePolicyMapInput

type FilevantagePolicyMapInput interface {
	pulumi.Input

	ToFilevantagePolicyMapOutput() FilevantagePolicyMapOutput
	ToFilevantagePolicyMapOutputWithContext(context.Context) FilevantagePolicyMapOutput
}

FilevantagePolicyMapInput is an input type that accepts FilevantagePolicyMap and FilevantagePolicyMapOutput values. You can construct a concrete instance of `FilevantagePolicyMapInput` via:

FilevantagePolicyMap{ "key": FilevantagePolicyArgs{...} }

type FilevantagePolicyMapOutput

type FilevantagePolicyMapOutput struct{ *pulumi.OutputState }

func (FilevantagePolicyMapOutput) ElementType

func (FilevantagePolicyMapOutput) ElementType() reflect.Type

func (FilevantagePolicyMapOutput) MapIndex

func (FilevantagePolicyMapOutput) ToFilevantagePolicyMapOutput

func (o FilevantagePolicyMapOutput) ToFilevantagePolicyMapOutput() FilevantagePolicyMapOutput

func (FilevantagePolicyMapOutput) ToFilevantagePolicyMapOutputWithContext

func (o FilevantagePolicyMapOutput) ToFilevantagePolicyMapOutputWithContext(ctx context.Context) FilevantagePolicyMapOutput

type FilevantagePolicyOutput

type FilevantagePolicyOutput struct{ *pulumi.OutputState }

func (FilevantagePolicyOutput) Description

Description of the filevantage policy.

func (FilevantagePolicyOutput) ElementType

func (FilevantagePolicyOutput) ElementType() reflect.Type

func (FilevantagePolicyOutput) Enabled

Enable the filevantage policy.

func (FilevantagePolicyOutput) HostGroups

Host Group ids to attach to the filevantage policy.

func (FilevantagePolicyOutput) LastUpdated

func (FilevantagePolicyOutput) Name

Name of the filevantage policy.

func (FilevantagePolicyOutput) PlatformName

func (o FilevantagePolicyOutput) PlatformName() pulumi.StringOutput

Platform for the filevantage policy to manage. (Windows, Mac, Linux)

func (FilevantagePolicyOutput) RuleGroups

Rule Group ids to attach to the filevantage policy. Precedence is based on the order of the list. Rule groups must be the same type as the policy.

func (FilevantagePolicyOutput) ScheduledExclusions

Scheduled exclusions for the filevantage policy.

func (FilevantagePolicyOutput) ToFilevantagePolicyOutput

func (o FilevantagePolicyOutput) ToFilevantagePolicyOutput() FilevantagePolicyOutput

func (FilevantagePolicyOutput) ToFilevantagePolicyOutputWithContext

func (o FilevantagePolicyOutput) ToFilevantagePolicyOutputWithContext(ctx context.Context) FilevantagePolicyOutput

type FilevantagePolicyScheduledExclusion

type FilevantagePolicyScheduledExclusion struct {
	// Description of the scheduled exclusion.
	Description *string `pulumi:"description"`
	// The end date of the scheduled exclusion. Format: YYYY-MM-DD
	EndDate *string `pulumi:"endDate"`
	// The end time of the scheduled exclusion in 24 hour format. Format: HH:MM
	EndTime *string `pulumi:"endTime"`
	// Identifier for the scheduled exclusion.
	Id *string `pulumi:"id"`
	// Name of the scheduled exclusion.
	Name string `pulumi:"name"`
	// A comma separated list of processes to exclude changes from. Example: **/run*me.sh excludes changes made by run*me.sh in any location
	Processes *string `pulumi:"processes"`
	// Repeated scheduled exclusion
	Repeated *FilevantagePolicyScheduledExclusionRepeated `pulumi:"repeated"`
	// The start date of the scheduled exclusion. Format: YYYY-MM-DD
	StartDate string `pulumi:"startDate"`
	// The start time of the scheduled exclusion in 24 hour format. Format: HH:MM
	StartTime string `pulumi:"startTime"`
	// The timezone to use for the time fields. See https://en.wikipedia.org/wiki/List*of*tz*database*time_zones.
	Timezone string `pulumi:"timezone"`
	// A comma separated list of users to exclude changes from. Example: user1,user2,admin* excludes changes made by user1, user2, and any user starting with admin
	Users *string `pulumi:"users"`
}

type FilevantagePolicyScheduledExclusionArgs

type FilevantagePolicyScheduledExclusionArgs struct {
	// Description of the scheduled exclusion.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// The end date of the scheduled exclusion. Format: YYYY-MM-DD
	EndDate pulumi.StringPtrInput `pulumi:"endDate"`
	// The end time of the scheduled exclusion in 24 hour format. Format: HH:MM
	EndTime pulumi.StringPtrInput `pulumi:"endTime"`
	// Identifier for the scheduled exclusion.
	Id pulumi.StringPtrInput `pulumi:"id"`
	// Name of the scheduled exclusion.
	Name pulumi.StringInput `pulumi:"name"`
	// A comma separated list of processes to exclude changes from. Example: **/run*me.sh excludes changes made by run*me.sh in any location
	Processes pulumi.StringPtrInput `pulumi:"processes"`
	// Repeated scheduled exclusion
	Repeated FilevantagePolicyScheduledExclusionRepeatedPtrInput `pulumi:"repeated"`
	// The start date of the scheduled exclusion. Format: YYYY-MM-DD
	StartDate pulumi.StringInput `pulumi:"startDate"`
	// The start time of the scheduled exclusion in 24 hour format. Format: HH:MM
	StartTime pulumi.StringInput `pulumi:"startTime"`
	// The timezone to use for the time fields. See https://en.wikipedia.org/wiki/List*of*tz*database*time_zones.
	Timezone pulumi.StringInput `pulumi:"timezone"`
	// A comma separated list of users to exclude changes from. Example: user1,user2,admin* excludes changes made by user1, user2, and any user starting with admin
	Users pulumi.StringPtrInput `pulumi:"users"`
}

func (FilevantagePolicyScheduledExclusionArgs) ElementType

func (FilevantagePolicyScheduledExclusionArgs) ToFilevantagePolicyScheduledExclusionOutput

func (i FilevantagePolicyScheduledExclusionArgs) ToFilevantagePolicyScheduledExclusionOutput() FilevantagePolicyScheduledExclusionOutput

func (FilevantagePolicyScheduledExclusionArgs) ToFilevantagePolicyScheduledExclusionOutputWithContext

func (i FilevantagePolicyScheduledExclusionArgs) ToFilevantagePolicyScheduledExclusionOutputWithContext(ctx context.Context) FilevantagePolicyScheduledExclusionOutput

type FilevantagePolicyScheduledExclusionArray

type FilevantagePolicyScheduledExclusionArray []FilevantagePolicyScheduledExclusionInput

func (FilevantagePolicyScheduledExclusionArray) ElementType

func (FilevantagePolicyScheduledExclusionArray) ToFilevantagePolicyScheduledExclusionArrayOutput

func (i FilevantagePolicyScheduledExclusionArray) ToFilevantagePolicyScheduledExclusionArrayOutput() FilevantagePolicyScheduledExclusionArrayOutput

func (FilevantagePolicyScheduledExclusionArray) ToFilevantagePolicyScheduledExclusionArrayOutputWithContext

func (i FilevantagePolicyScheduledExclusionArray) ToFilevantagePolicyScheduledExclusionArrayOutputWithContext(ctx context.Context) FilevantagePolicyScheduledExclusionArrayOutput

type FilevantagePolicyScheduledExclusionArrayInput

type FilevantagePolicyScheduledExclusionArrayInput interface {
	pulumi.Input

	ToFilevantagePolicyScheduledExclusionArrayOutput() FilevantagePolicyScheduledExclusionArrayOutput
	ToFilevantagePolicyScheduledExclusionArrayOutputWithContext(context.Context) FilevantagePolicyScheduledExclusionArrayOutput
}

FilevantagePolicyScheduledExclusionArrayInput is an input type that accepts FilevantagePolicyScheduledExclusionArray and FilevantagePolicyScheduledExclusionArrayOutput values. You can construct a concrete instance of `FilevantagePolicyScheduledExclusionArrayInput` via:

FilevantagePolicyScheduledExclusionArray{ FilevantagePolicyScheduledExclusionArgs{...} }

type FilevantagePolicyScheduledExclusionArrayOutput

type FilevantagePolicyScheduledExclusionArrayOutput struct{ *pulumi.OutputState }

func (FilevantagePolicyScheduledExclusionArrayOutput) ElementType

func (FilevantagePolicyScheduledExclusionArrayOutput) Index

func (FilevantagePolicyScheduledExclusionArrayOutput) ToFilevantagePolicyScheduledExclusionArrayOutput

func (o FilevantagePolicyScheduledExclusionArrayOutput) ToFilevantagePolicyScheduledExclusionArrayOutput() FilevantagePolicyScheduledExclusionArrayOutput

func (FilevantagePolicyScheduledExclusionArrayOutput) ToFilevantagePolicyScheduledExclusionArrayOutputWithContext

func (o FilevantagePolicyScheduledExclusionArrayOutput) ToFilevantagePolicyScheduledExclusionArrayOutputWithContext(ctx context.Context) FilevantagePolicyScheduledExclusionArrayOutput

type FilevantagePolicyScheduledExclusionInput

type FilevantagePolicyScheduledExclusionInput interface {
	pulumi.Input

	ToFilevantagePolicyScheduledExclusionOutput() FilevantagePolicyScheduledExclusionOutput
	ToFilevantagePolicyScheduledExclusionOutputWithContext(context.Context) FilevantagePolicyScheduledExclusionOutput
}

FilevantagePolicyScheduledExclusionInput is an input type that accepts FilevantagePolicyScheduledExclusionArgs and FilevantagePolicyScheduledExclusionOutput values. You can construct a concrete instance of `FilevantagePolicyScheduledExclusionInput` via:

FilevantagePolicyScheduledExclusionArgs{...}

type FilevantagePolicyScheduledExclusionOutput

type FilevantagePolicyScheduledExclusionOutput struct{ *pulumi.OutputState }

func (FilevantagePolicyScheduledExclusionOutput) Description

Description of the scheduled exclusion.

func (FilevantagePolicyScheduledExclusionOutput) ElementType

func (FilevantagePolicyScheduledExclusionOutput) EndDate

The end date of the scheduled exclusion. Format: YYYY-MM-DD

func (FilevantagePolicyScheduledExclusionOutput) EndTime

The end time of the scheduled exclusion in 24 hour format. Format: HH:MM

func (FilevantagePolicyScheduledExclusionOutput) Id

Identifier for the scheduled exclusion.

func (FilevantagePolicyScheduledExclusionOutput) Name

Name of the scheduled exclusion.

func (FilevantagePolicyScheduledExclusionOutput) Processes

A comma separated list of processes to exclude changes from. Example: **/run*me.sh excludes changes made by run*me.sh in any location

func (FilevantagePolicyScheduledExclusionOutput) Repeated

Repeated scheduled exclusion

func (FilevantagePolicyScheduledExclusionOutput) StartDate

The start date of the scheduled exclusion. Format: YYYY-MM-DD

func (FilevantagePolicyScheduledExclusionOutput) StartTime

The start time of the scheduled exclusion in 24 hour format. Format: HH:MM

func (FilevantagePolicyScheduledExclusionOutput) Timezone

The timezone to use for the time fields. See https://en.wikipedia.org/wiki/List*of*tz*database*time_zones.

func (FilevantagePolicyScheduledExclusionOutput) ToFilevantagePolicyScheduledExclusionOutput

func (o FilevantagePolicyScheduledExclusionOutput) ToFilevantagePolicyScheduledExclusionOutput() FilevantagePolicyScheduledExclusionOutput

func (FilevantagePolicyScheduledExclusionOutput) ToFilevantagePolicyScheduledExclusionOutputWithContext

func (o FilevantagePolicyScheduledExclusionOutput) ToFilevantagePolicyScheduledExclusionOutputWithContext(ctx context.Context) FilevantagePolicyScheduledExclusionOutput

func (FilevantagePolicyScheduledExclusionOutput) Users

A comma separated list of users to exclude changes from. Example: user1,user2,admin* excludes changes made by user1, user2, and any user starting with admin

type FilevantagePolicyScheduledExclusionRepeated

type FilevantagePolicyScheduledExclusionRepeated struct {
	// If the exclusion is all day.
	AllDay bool `pulumi:"allDay"`
	// The days of the month to allow the exclusion. Required if frequency is set to monthly and monthlyOccurrence is set to days. Options: 1-31
	DaysOfMonths []int `pulumi:"daysOfMonths"`
	// The days of the week to allow the exclusion. Required if frequency is set to weekly or set to monthly and monthlyOccurrence is set to a week. Options: Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday
	DaysOfWeeks []string `pulumi:"daysOfWeeks"`
	// The end time to end the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false
	EndTime *string `pulumi:"endTime"`
	// The frequency of the exclusion. Options: daily, weekly, monthly
	Frequency string `pulumi:"frequency"`
	// The monthly occurrence of the exclusion. Either specify a week (first, second, third, fourth) or set to days to specify days of the month. Options: first, second, third, fourth, days. Required if frequency is set to monthly
	MonthlyOccurrence *string `pulumi:"monthlyOccurrence"`
	// The start time to allow the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false
	StartTime *string `pulumi:"startTime"`
}

type FilevantagePolicyScheduledExclusionRepeatedArgs

type FilevantagePolicyScheduledExclusionRepeatedArgs struct {
	// If the exclusion is all day.
	AllDay pulumi.BoolInput `pulumi:"allDay"`
	// The days of the month to allow the exclusion. Required if frequency is set to monthly and monthlyOccurrence is set to days. Options: 1-31
	DaysOfMonths pulumi.IntArrayInput `pulumi:"daysOfMonths"`
	// The days of the week to allow the exclusion. Required if frequency is set to weekly or set to monthly and monthlyOccurrence is set to a week. Options: Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday
	DaysOfWeeks pulumi.StringArrayInput `pulumi:"daysOfWeeks"`
	// The end time to end the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false
	EndTime pulumi.StringPtrInput `pulumi:"endTime"`
	// The frequency of the exclusion. Options: daily, weekly, monthly
	Frequency pulumi.StringInput `pulumi:"frequency"`
	// The monthly occurrence of the exclusion. Either specify a week (first, second, third, fourth) or set to days to specify days of the month. Options: first, second, third, fourth, days. Required if frequency is set to monthly
	MonthlyOccurrence pulumi.StringPtrInput `pulumi:"monthlyOccurrence"`
	// The start time to allow the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false
	StartTime pulumi.StringPtrInput `pulumi:"startTime"`
}

func (FilevantagePolicyScheduledExclusionRepeatedArgs) ElementType

func (FilevantagePolicyScheduledExclusionRepeatedArgs) ToFilevantagePolicyScheduledExclusionRepeatedOutput

func (i FilevantagePolicyScheduledExclusionRepeatedArgs) ToFilevantagePolicyScheduledExclusionRepeatedOutput() FilevantagePolicyScheduledExclusionRepeatedOutput

func (FilevantagePolicyScheduledExclusionRepeatedArgs) ToFilevantagePolicyScheduledExclusionRepeatedOutputWithContext

func (i FilevantagePolicyScheduledExclusionRepeatedArgs) ToFilevantagePolicyScheduledExclusionRepeatedOutputWithContext(ctx context.Context) FilevantagePolicyScheduledExclusionRepeatedOutput

func (FilevantagePolicyScheduledExclusionRepeatedArgs) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutput

func (i FilevantagePolicyScheduledExclusionRepeatedArgs) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutput() FilevantagePolicyScheduledExclusionRepeatedPtrOutput

func (FilevantagePolicyScheduledExclusionRepeatedArgs) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutputWithContext

func (i FilevantagePolicyScheduledExclusionRepeatedArgs) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutputWithContext(ctx context.Context) FilevantagePolicyScheduledExclusionRepeatedPtrOutput

type FilevantagePolicyScheduledExclusionRepeatedInput

type FilevantagePolicyScheduledExclusionRepeatedInput interface {
	pulumi.Input

	ToFilevantagePolicyScheduledExclusionRepeatedOutput() FilevantagePolicyScheduledExclusionRepeatedOutput
	ToFilevantagePolicyScheduledExclusionRepeatedOutputWithContext(context.Context) FilevantagePolicyScheduledExclusionRepeatedOutput
}

FilevantagePolicyScheduledExclusionRepeatedInput is an input type that accepts FilevantagePolicyScheduledExclusionRepeatedArgs and FilevantagePolicyScheduledExclusionRepeatedOutput values. You can construct a concrete instance of `FilevantagePolicyScheduledExclusionRepeatedInput` via:

FilevantagePolicyScheduledExclusionRepeatedArgs{...}

type FilevantagePolicyScheduledExclusionRepeatedOutput

type FilevantagePolicyScheduledExclusionRepeatedOutput struct{ *pulumi.OutputState }

func (FilevantagePolicyScheduledExclusionRepeatedOutput) AllDay

If the exclusion is all day.

func (FilevantagePolicyScheduledExclusionRepeatedOutput) DaysOfMonths

The days of the month to allow the exclusion. Required if frequency is set to monthly and monthlyOccurrence is set to days. Options: 1-31

func (FilevantagePolicyScheduledExclusionRepeatedOutput) DaysOfWeeks

The days of the week to allow the exclusion. Required if frequency is set to weekly or set to monthly and monthlyOccurrence is set to a week. Options: Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday

func (FilevantagePolicyScheduledExclusionRepeatedOutput) ElementType

func (FilevantagePolicyScheduledExclusionRepeatedOutput) EndTime

The end time to end the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false

func (FilevantagePolicyScheduledExclusionRepeatedOutput) Frequency

The frequency of the exclusion. Options: daily, weekly, monthly

func (FilevantagePolicyScheduledExclusionRepeatedOutput) MonthlyOccurrence

The monthly occurrence of the exclusion. Either specify a week (first, second, third, fourth) or set to days to specify days of the month. Options: first, second, third, fourth, days. Required if frequency is set to monthly

func (FilevantagePolicyScheduledExclusionRepeatedOutput) StartTime

The start time to allow the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false

func (FilevantagePolicyScheduledExclusionRepeatedOutput) ToFilevantagePolicyScheduledExclusionRepeatedOutput

func (o FilevantagePolicyScheduledExclusionRepeatedOutput) ToFilevantagePolicyScheduledExclusionRepeatedOutput() FilevantagePolicyScheduledExclusionRepeatedOutput

func (FilevantagePolicyScheduledExclusionRepeatedOutput) ToFilevantagePolicyScheduledExclusionRepeatedOutputWithContext

func (o FilevantagePolicyScheduledExclusionRepeatedOutput) ToFilevantagePolicyScheduledExclusionRepeatedOutputWithContext(ctx context.Context) FilevantagePolicyScheduledExclusionRepeatedOutput

func (FilevantagePolicyScheduledExclusionRepeatedOutput) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutput

func (o FilevantagePolicyScheduledExclusionRepeatedOutput) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutput() FilevantagePolicyScheduledExclusionRepeatedPtrOutput

func (FilevantagePolicyScheduledExclusionRepeatedOutput) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutputWithContext

func (o FilevantagePolicyScheduledExclusionRepeatedOutput) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutputWithContext(ctx context.Context) FilevantagePolicyScheduledExclusionRepeatedPtrOutput

type FilevantagePolicyScheduledExclusionRepeatedPtrInput

type FilevantagePolicyScheduledExclusionRepeatedPtrInput interface {
	pulumi.Input

	ToFilevantagePolicyScheduledExclusionRepeatedPtrOutput() FilevantagePolicyScheduledExclusionRepeatedPtrOutput
	ToFilevantagePolicyScheduledExclusionRepeatedPtrOutputWithContext(context.Context) FilevantagePolicyScheduledExclusionRepeatedPtrOutput
}

FilevantagePolicyScheduledExclusionRepeatedPtrInput is an input type that accepts FilevantagePolicyScheduledExclusionRepeatedArgs, FilevantagePolicyScheduledExclusionRepeatedPtr and FilevantagePolicyScheduledExclusionRepeatedPtrOutput values. You can construct a concrete instance of `FilevantagePolicyScheduledExclusionRepeatedPtrInput` via:

        FilevantagePolicyScheduledExclusionRepeatedArgs{...}

or:

        nil

type FilevantagePolicyScheduledExclusionRepeatedPtrOutput

type FilevantagePolicyScheduledExclusionRepeatedPtrOutput struct{ *pulumi.OutputState }

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) AllDay

If the exclusion is all day.

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) DaysOfMonths

The days of the month to allow the exclusion. Required if frequency is set to monthly and monthlyOccurrence is set to days. Options: 1-31

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) DaysOfWeeks

The days of the week to allow the exclusion. Required if frequency is set to weekly or set to monthly and monthlyOccurrence is set to a week. Options: Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) Elem

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) ElementType

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) EndTime

The end time to end the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) Frequency

The frequency of the exclusion. Options: daily, weekly, monthly

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) MonthlyOccurrence

The monthly occurrence of the exclusion. Either specify a week (first, second, third, fourth) or set to days to specify days of the month. Options: first, second, third, fourth, days. Required if frequency is set to monthly

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) StartTime

The start time to allow the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutput

func (FilevantagePolicyScheduledExclusionRepeatedPtrOutput) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutputWithContext

func (o FilevantagePolicyScheduledExclusionRepeatedPtrOutput) ToFilevantagePolicyScheduledExclusionRepeatedPtrOutputWithContext(ctx context.Context) FilevantagePolicyScheduledExclusionRepeatedPtrOutput

type FilevantagePolicyState

type FilevantagePolicyState struct {
	// Description of the filevantage policy.
	Description pulumi.StringPtrInput
	// Enable the filevantage policy.
	Enabled pulumi.BoolPtrInput
	// Host Group ids to attach to the filevantage policy.
	HostGroups  pulumi.StringArrayInput
	LastUpdated pulumi.StringPtrInput
	// Name of the filevantage policy.
	Name pulumi.StringPtrInput
	// Platform for the filevantage policy to manage. (Windows, Mac, Linux)
	PlatformName pulumi.StringPtrInput
	// Rule Group ids to attach to the filevantage policy. Precedence is based on the order of the list. Rule groups must be the same type as the policy.
	RuleGroups pulumi.StringArrayInput
	// Scheduled exclusions for the filevantage policy.
	ScheduledExclusions FilevantagePolicyScheduledExclusionArrayInput
}

func (FilevantagePolicyState) ElementType

func (FilevantagePolicyState) ElementType() reflect.Type

type FilevantageRuleGroup

type FilevantageRuleGroup struct {
	pulumi.CustomResourceState

	// Description of the filevantage rule group.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	LastUpdated pulumi.StringOutput    `pulumi:"lastUpdated"`
	// Name of the filevantage rule group.
	Name pulumi.StringOutput `pulumi:"name"`
	// Rules to be associated with the rule group. Precedence is determined by the order of the rules in the list.
	Rules FilevantageRuleGroupRuleArrayOutput `pulumi:"rules"`
	// The type of filevantage rule group.
	Type pulumi.StringPtrOutput `pulumi:"type"`
}

This resource allows management of a FileVantage rule group. A FileVantage rule group is a collection of file integrity rules that can be assigned to a FileVantge policy.

## API Scopes

The following API scopes are required:

- Falcon FileVantage | Read & Write

## Import

filevantage rule group can be imported by specifying the policy id.

```sh $ pulumi import crowdstrike:index/filevantageRuleGroup:FilevantageRuleGroup example 7fb858a949034a0cbca175f660f1e769 ```

func GetFilevantageRuleGroup

func GetFilevantageRuleGroup(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *FilevantageRuleGroupState, opts ...pulumi.ResourceOption) (*FilevantageRuleGroup, error)

GetFilevantageRuleGroup gets an existing FilevantageRuleGroup resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewFilevantageRuleGroup

func NewFilevantageRuleGroup(ctx *pulumi.Context,
	name string, args *FilevantageRuleGroupArgs, opts ...pulumi.ResourceOption) (*FilevantageRuleGroup, error)

NewFilevantageRuleGroup registers a new resource with the given unique name, arguments, and options.

func (*FilevantageRuleGroup) ElementType

func (*FilevantageRuleGroup) ElementType() reflect.Type

func (*FilevantageRuleGroup) ToFilevantageRuleGroupOutput

func (i *FilevantageRuleGroup) ToFilevantageRuleGroupOutput() FilevantageRuleGroupOutput

func (*FilevantageRuleGroup) ToFilevantageRuleGroupOutputWithContext

func (i *FilevantageRuleGroup) ToFilevantageRuleGroupOutputWithContext(ctx context.Context) FilevantageRuleGroupOutput

type FilevantageRuleGroupArgs

type FilevantageRuleGroupArgs struct {
	// Description of the filevantage rule group.
	Description pulumi.StringPtrInput
	// Name of the filevantage rule group.
	Name pulumi.StringPtrInput
	// Rules to be associated with the rule group. Precedence is determined by the order of the rules in the list.
	Rules FilevantageRuleGroupRuleArrayInput
	// The type of filevantage rule group.
	Type pulumi.StringPtrInput
}

The set of arguments for constructing a FilevantageRuleGroup resource.

func (FilevantageRuleGroupArgs) ElementType

func (FilevantageRuleGroupArgs) ElementType() reflect.Type

type FilevantageRuleGroupArray

type FilevantageRuleGroupArray []FilevantageRuleGroupInput

func (FilevantageRuleGroupArray) ElementType

func (FilevantageRuleGroupArray) ElementType() reflect.Type

func (FilevantageRuleGroupArray) ToFilevantageRuleGroupArrayOutput

func (i FilevantageRuleGroupArray) ToFilevantageRuleGroupArrayOutput() FilevantageRuleGroupArrayOutput

func (FilevantageRuleGroupArray) ToFilevantageRuleGroupArrayOutputWithContext

func (i FilevantageRuleGroupArray) ToFilevantageRuleGroupArrayOutputWithContext(ctx context.Context) FilevantageRuleGroupArrayOutput

type FilevantageRuleGroupArrayInput

type FilevantageRuleGroupArrayInput interface {
	pulumi.Input

	ToFilevantageRuleGroupArrayOutput() FilevantageRuleGroupArrayOutput
	ToFilevantageRuleGroupArrayOutputWithContext(context.Context) FilevantageRuleGroupArrayOutput
}

FilevantageRuleGroupArrayInput is an input type that accepts FilevantageRuleGroupArray and FilevantageRuleGroupArrayOutput values. You can construct a concrete instance of `FilevantageRuleGroupArrayInput` via:

FilevantageRuleGroupArray{ FilevantageRuleGroupArgs{...} }

type FilevantageRuleGroupArrayOutput

type FilevantageRuleGroupArrayOutput struct{ *pulumi.OutputState }

func (FilevantageRuleGroupArrayOutput) ElementType

func (FilevantageRuleGroupArrayOutput) Index

func (FilevantageRuleGroupArrayOutput) ToFilevantageRuleGroupArrayOutput

func (o FilevantageRuleGroupArrayOutput) ToFilevantageRuleGroupArrayOutput() FilevantageRuleGroupArrayOutput

func (FilevantageRuleGroupArrayOutput) ToFilevantageRuleGroupArrayOutputWithContext

func (o FilevantageRuleGroupArrayOutput) ToFilevantageRuleGroupArrayOutputWithContext(ctx context.Context) FilevantageRuleGroupArrayOutput

type FilevantageRuleGroupInput

type FilevantageRuleGroupInput interface {
	pulumi.Input

	ToFilevantageRuleGroupOutput() FilevantageRuleGroupOutput
	ToFilevantageRuleGroupOutputWithContext(ctx context.Context) FilevantageRuleGroupOutput
}

type FilevantageRuleGroupMap

type FilevantageRuleGroupMap map[string]FilevantageRuleGroupInput

func (FilevantageRuleGroupMap) ElementType

func (FilevantageRuleGroupMap) ElementType() reflect.Type

func (FilevantageRuleGroupMap) ToFilevantageRuleGroupMapOutput

func (i FilevantageRuleGroupMap) ToFilevantageRuleGroupMapOutput() FilevantageRuleGroupMapOutput

func (FilevantageRuleGroupMap) ToFilevantageRuleGroupMapOutputWithContext

func (i FilevantageRuleGroupMap) ToFilevantageRuleGroupMapOutputWithContext(ctx context.Context) FilevantageRuleGroupMapOutput

type FilevantageRuleGroupMapInput

type FilevantageRuleGroupMapInput interface {
	pulumi.Input

	ToFilevantageRuleGroupMapOutput() FilevantageRuleGroupMapOutput
	ToFilevantageRuleGroupMapOutputWithContext(context.Context) FilevantageRuleGroupMapOutput
}

FilevantageRuleGroupMapInput is an input type that accepts FilevantageRuleGroupMap and FilevantageRuleGroupMapOutput values. You can construct a concrete instance of `FilevantageRuleGroupMapInput` via:

FilevantageRuleGroupMap{ "key": FilevantageRuleGroupArgs{...} }

type FilevantageRuleGroupMapOutput

type FilevantageRuleGroupMapOutput struct{ *pulumi.OutputState }

func (FilevantageRuleGroupMapOutput) ElementType

func (FilevantageRuleGroupMapOutput) MapIndex

func (FilevantageRuleGroupMapOutput) ToFilevantageRuleGroupMapOutput

func (o FilevantageRuleGroupMapOutput) ToFilevantageRuleGroupMapOutput() FilevantageRuleGroupMapOutput

func (FilevantageRuleGroupMapOutput) ToFilevantageRuleGroupMapOutputWithContext

func (o FilevantageRuleGroupMapOutput) ToFilevantageRuleGroupMapOutputWithContext(ctx context.Context) FilevantageRuleGroupMapOutput

type FilevantageRuleGroupOutput

type FilevantageRuleGroupOutput struct{ *pulumi.OutputState }

func (FilevantageRuleGroupOutput) Description

Description of the filevantage rule group.

func (FilevantageRuleGroupOutput) ElementType

func (FilevantageRuleGroupOutput) ElementType() reflect.Type

func (FilevantageRuleGroupOutput) LastUpdated

func (FilevantageRuleGroupOutput) Name

Name of the filevantage rule group.

func (FilevantageRuleGroupOutput) Rules

Rules to be associated with the rule group. Precedence is determined by the order of the rules in the list.

func (FilevantageRuleGroupOutput) ToFilevantageRuleGroupOutput

func (o FilevantageRuleGroupOutput) ToFilevantageRuleGroupOutput() FilevantageRuleGroupOutput

func (FilevantageRuleGroupOutput) ToFilevantageRuleGroupOutputWithContext

func (o FilevantageRuleGroupOutput) ToFilevantageRuleGroupOutputWithContext(ctx context.Context) FilevantageRuleGroupOutput

func (FilevantageRuleGroupOutput) Type

The type of filevantage rule group.

type FilevantageRuleGroupRule

type FilevantageRuleGroupRule struct {
	// Depth below the base path to monitor.
	Depth *string `pulumi:"depth"`
	// Description of the filevantage rule.
	Description string `pulumi:"description"`
	// Enable content capture for the rule. Requires watch*file*write*changes or watch*key*value*set_changes to be enabled.
	EnableContentCapture *bool `pulumi:"enableContentCapture"`
	// Represents the files, directories, registry keys, or registry values that will be excluded from monitoring.
	Exclude *string `pulumi:"exclude"`
	// Represents the changes performed by specific processes that will be excluded from monitoring.
	ExcludeProcesses *string `pulumi:"excludeProcesses"`
	// Represents the changes performed by specific users that will be excluded from monitoring.
	ExcludeUsers *string `pulumi:"excludeUsers"`
	// List of file names whose content will be monitored. Listed files must match the file include pattern and not match the file exclude pattern.
	FileNames []string `pulumi:"fileNames"`
	// Identifier for the filevantage rule.
	Id *string `pulumi:"id"`
	// Represents the files, directories, registry keys, or registry values that will be monitored. Defaults to all (*)
	Include *string `pulumi:"include"`
	// Represents the changes performed by specific processes that will be monitored.
	IncludeProcesses *string `pulumi:"includeProcesses"`
	// Represents the changes performed by specific users that will be monitored.
	IncludeUsers *string `pulumi:"includeUsers"`
	// Representing the file system or registry path to monitor. All paths must end with the path separator, e.g. c:\windows\ for windows and /usr/bin/ for linux/mac.
	Path string `pulumi:"path"`
	// Precedence of the rule in the rule group.
	Precedence *int `pulumi:"precedence"`
	// List of registry values whose content will be monitored. Listed registry values must match the registry include pattern and not match the registry exclude pattern.
	RegistryValues []string `pulumi:"registryValues"`
	// Severity to categorize change events produced by this rule.
	Severity string `pulumi:"severity"`
	// Monitor directory attribute change events.
	WatchDirectoryAttributeChanges *bool `pulumi:"watchDirectoryAttributeChanges"`
	// Monitor directory creation events.
	WatchDirectoryCreateChanges *bool `pulumi:"watchDirectoryCreateChanges"`
	// Monitor directory deletion events.
	WatchDirectoryDeleteChanges *bool `pulumi:"watchDirectoryDeleteChanges"`
	// Monitor directory permission change events.
	WatchDirectoryPermissionChanges *bool `pulumi:"watchDirectoryPermissionChanges"`
	// Monitor directory rename events.
	WatchDirectoryRenameChanges *bool `pulumi:"watchDirectoryRenameChanges"`
	// Monitor file attribute change events.
	WatchFileAttributeChanges *bool `pulumi:"watchFileAttributeChanges"`
	// Monitor file creation events.
	WatchFileCreateChanges *bool `pulumi:"watchFileCreateChanges"`
	// Monitor file deletion events.
	WatchFileDeleteChanges *bool `pulumi:"watchFileDeleteChanges"`
	// Monitor file permission change events.
	WatchFilePermissionChanges *bool `pulumi:"watchFilePermissionChanges"`
	// Monitor file rename events.
	WatchFileRenameChanges *bool `pulumi:"watchFileRenameChanges"`
	// Monitor file write events.
	WatchFileWriteChanges *bool `pulumi:"watchFileWriteChanges"`
	// Monitor registry key creation events.
	WatchKeyCreateChanges *bool `pulumi:"watchKeyCreateChanges"`
	// Monitor registry key deletion events.
	WatchKeyDeleteChanges *bool `pulumi:"watchKeyDeleteChanges"`
	// Monitor registry key permission change events.
	WatchKeyPermissionsChanges *bool `pulumi:"watchKeyPermissionsChanges"`
	// Monitor registry key rename events.
	WatchKeyRenameChanges *bool `pulumi:"watchKeyRenameChanges"`
	// Monitor registry value deletion events.
	WatchKeyValueDeleteChanges *bool `pulumi:"watchKeyValueDeleteChanges"`
	// Monitor registry value set events.
	WatchKeyValueSetChanges *bool `pulumi:"watchKeyValueSetChanges"`
}

type FilevantageRuleGroupRuleArgs

type FilevantageRuleGroupRuleArgs struct {
	// Depth below the base path to monitor.
	Depth pulumi.StringPtrInput `pulumi:"depth"`
	// Description of the filevantage rule.
	Description pulumi.StringInput `pulumi:"description"`
	// Enable content capture for the rule. Requires watch*file*write*changes or watch*key*value*set_changes to be enabled.
	EnableContentCapture pulumi.BoolPtrInput `pulumi:"enableContentCapture"`
	// Represents the files, directories, registry keys, or registry values that will be excluded from monitoring.
	Exclude pulumi.StringPtrInput `pulumi:"exclude"`
	// Represents the changes performed by specific processes that will be excluded from monitoring.
	ExcludeProcesses pulumi.StringPtrInput `pulumi:"excludeProcesses"`
	// Represents the changes performed by specific users that will be excluded from monitoring.
	ExcludeUsers pulumi.StringPtrInput `pulumi:"excludeUsers"`
	// List of file names whose content will be monitored. Listed files must match the file include pattern and not match the file exclude pattern.
	FileNames pulumi.StringArrayInput `pulumi:"fileNames"`
	// Identifier for the filevantage rule.
	Id pulumi.StringPtrInput `pulumi:"id"`
	// Represents the files, directories, registry keys, or registry values that will be monitored. Defaults to all (*)
	Include pulumi.StringPtrInput `pulumi:"include"`
	// Represents the changes performed by specific processes that will be monitored.
	IncludeProcesses pulumi.StringPtrInput `pulumi:"includeProcesses"`
	// Represents the changes performed by specific users that will be monitored.
	IncludeUsers pulumi.StringPtrInput `pulumi:"includeUsers"`
	// Representing the file system or registry path to monitor. All paths must end with the path separator, e.g. c:\windows\ for windows and /usr/bin/ for linux/mac.
	Path pulumi.StringInput `pulumi:"path"`
	// Precedence of the rule in the rule group.
	Precedence pulumi.IntPtrInput `pulumi:"precedence"`
	// List of registry values whose content will be monitored. Listed registry values must match the registry include pattern and not match the registry exclude pattern.
	RegistryValues pulumi.StringArrayInput `pulumi:"registryValues"`
	// Severity to categorize change events produced by this rule.
	Severity pulumi.StringInput `pulumi:"severity"`
	// Monitor directory attribute change events.
	WatchDirectoryAttributeChanges pulumi.BoolPtrInput `pulumi:"watchDirectoryAttributeChanges"`
	// Monitor directory creation events.
	WatchDirectoryCreateChanges pulumi.BoolPtrInput `pulumi:"watchDirectoryCreateChanges"`
	// Monitor directory deletion events.
	WatchDirectoryDeleteChanges pulumi.BoolPtrInput `pulumi:"watchDirectoryDeleteChanges"`
	// Monitor directory permission change events.
	WatchDirectoryPermissionChanges pulumi.BoolPtrInput `pulumi:"watchDirectoryPermissionChanges"`
	// Monitor directory rename events.
	WatchDirectoryRenameChanges pulumi.BoolPtrInput `pulumi:"watchDirectoryRenameChanges"`
	// Monitor file attribute change events.
	WatchFileAttributeChanges pulumi.BoolPtrInput `pulumi:"watchFileAttributeChanges"`
	// Monitor file creation events.
	WatchFileCreateChanges pulumi.BoolPtrInput `pulumi:"watchFileCreateChanges"`
	// Monitor file deletion events.
	WatchFileDeleteChanges pulumi.BoolPtrInput `pulumi:"watchFileDeleteChanges"`
	// Monitor file permission change events.
	WatchFilePermissionChanges pulumi.BoolPtrInput `pulumi:"watchFilePermissionChanges"`
	// Monitor file rename events.
	WatchFileRenameChanges pulumi.BoolPtrInput `pulumi:"watchFileRenameChanges"`
	// Monitor file write events.
	WatchFileWriteChanges pulumi.BoolPtrInput `pulumi:"watchFileWriteChanges"`
	// Monitor registry key creation events.
	WatchKeyCreateChanges pulumi.BoolPtrInput `pulumi:"watchKeyCreateChanges"`
	// Monitor registry key deletion events.
	WatchKeyDeleteChanges pulumi.BoolPtrInput `pulumi:"watchKeyDeleteChanges"`
	// Monitor registry key permission change events.
	WatchKeyPermissionsChanges pulumi.BoolPtrInput `pulumi:"watchKeyPermissionsChanges"`
	// Monitor registry key rename events.
	WatchKeyRenameChanges pulumi.BoolPtrInput `pulumi:"watchKeyRenameChanges"`
	// Monitor registry value deletion events.
	WatchKeyValueDeleteChanges pulumi.BoolPtrInput `pulumi:"watchKeyValueDeleteChanges"`
	// Monitor registry value set events.
	WatchKeyValueSetChanges pulumi.BoolPtrInput `pulumi:"watchKeyValueSetChanges"`
}

func (FilevantageRuleGroupRuleArgs) ElementType

func (FilevantageRuleGroupRuleArgs) ToFilevantageRuleGroupRuleOutput

func (i FilevantageRuleGroupRuleArgs) ToFilevantageRuleGroupRuleOutput() FilevantageRuleGroupRuleOutput

func (FilevantageRuleGroupRuleArgs) ToFilevantageRuleGroupRuleOutputWithContext

func (i FilevantageRuleGroupRuleArgs) ToFilevantageRuleGroupRuleOutputWithContext(ctx context.Context) FilevantageRuleGroupRuleOutput

type FilevantageRuleGroupRuleArray

type FilevantageRuleGroupRuleArray []FilevantageRuleGroupRuleInput

func (FilevantageRuleGroupRuleArray) ElementType

func (FilevantageRuleGroupRuleArray) ToFilevantageRuleGroupRuleArrayOutput

func (i FilevantageRuleGroupRuleArray) ToFilevantageRuleGroupRuleArrayOutput() FilevantageRuleGroupRuleArrayOutput

func (FilevantageRuleGroupRuleArray) ToFilevantageRuleGroupRuleArrayOutputWithContext

func (i FilevantageRuleGroupRuleArray) ToFilevantageRuleGroupRuleArrayOutputWithContext(ctx context.Context) FilevantageRuleGroupRuleArrayOutput

type FilevantageRuleGroupRuleArrayInput

type FilevantageRuleGroupRuleArrayInput interface {
	pulumi.Input

	ToFilevantageRuleGroupRuleArrayOutput() FilevantageRuleGroupRuleArrayOutput
	ToFilevantageRuleGroupRuleArrayOutputWithContext(context.Context) FilevantageRuleGroupRuleArrayOutput
}

FilevantageRuleGroupRuleArrayInput is an input type that accepts FilevantageRuleGroupRuleArray and FilevantageRuleGroupRuleArrayOutput values. You can construct a concrete instance of `FilevantageRuleGroupRuleArrayInput` via:

FilevantageRuleGroupRuleArray{ FilevantageRuleGroupRuleArgs{...} }

type FilevantageRuleGroupRuleArrayOutput

type FilevantageRuleGroupRuleArrayOutput struct{ *pulumi.OutputState }

func (FilevantageRuleGroupRuleArrayOutput) ElementType

func (FilevantageRuleGroupRuleArrayOutput) Index

func (FilevantageRuleGroupRuleArrayOutput) ToFilevantageRuleGroupRuleArrayOutput

func (o FilevantageRuleGroupRuleArrayOutput) ToFilevantageRuleGroupRuleArrayOutput() FilevantageRuleGroupRuleArrayOutput

func (FilevantageRuleGroupRuleArrayOutput) ToFilevantageRuleGroupRuleArrayOutputWithContext

func (o FilevantageRuleGroupRuleArrayOutput) ToFilevantageRuleGroupRuleArrayOutputWithContext(ctx context.Context) FilevantageRuleGroupRuleArrayOutput

type FilevantageRuleGroupRuleInput

type FilevantageRuleGroupRuleInput interface {
	pulumi.Input

	ToFilevantageRuleGroupRuleOutput() FilevantageRuleGroupRuleOutput
	ToFilevantageRuleGroupRuleOutputWithContext(context.Context) FilevantageRuleGroupRuleOutput
}

FilevantageRuleGroupRuleInput is an input type that accepts FilevantageRuleGroupRuleArgs and FilevantageRuleGroupRuleOutput values. You can construct a concrete instance of `FilevantageRuleGroupRuleInput` via:

FilevantageRuleGroupRuleArgs{...}

type FilevantageRuleGroupRuleOutput

type FilevantageRuleGroupRuleOutput struct{ *pulumi.OutputState }

func (FilevantageRuleGroupRuleOutput) Depth

Depth below the base path to monitor.

func (FilevantageRuleGroupRuleOutput) Description

Description of the filevantage rule.

func (FilevantageRuleGroupRuleOutput) ElementType

func (FilevantageRuleGroupRuleOutput) EnableContentCapture

func (o FilevantageRuleGroupRuleOutput) EnableContentCapture() pulumi.BoolPtrOutput

Enable content capture for the rule. Requires watch*file*write*changes or watch*key*value*set_changes to be enabled.

func (FilevantageRuleGroupRuleOutput) Exclude

Represents the files, directories, registry keys, or registry values that will be excluded from monitoring.

func (FilevantageRuleGroupRuleOutput) ExcludeProcesses

Represents the changes performed by specific processes that will be excluded from monitoring.

func (FilevantageRuleGroupRuleOutput) ExcludeUsers

Represents the changes performed by specific users that will be excluded from monitoring.

func (FilevantageRuleGroupRuleOutput) FileNames

List of file names whose content will be monitored. Listed files must match the file include pattern and not match the file exclude pattern.

func (FilevantageRuleGroupRuleOutput) Id

Identifier for the filevantage rule.

func (FilevantageRuleGroupRuleOutput) Include

Represents the files, directories, registry keys, or registry values that will be monitored. Defaults to all (*)

func (FilevantageRuleGroupRuleOutput) IncludeProcesses

Represents the changes performed by specific processes that will be monitored.

func (FilevantageRuleGroupRuleOutput) IncludeUsers

Represents the changes performed by specific users that will be monitored.

func (FilevantageRuleGroupRuleOutput) Path

Representing the file system or registry path to monitor. All paths must end with the path separator, e.g. c:\windows\ for windows and /usr/bin/ for linux/mac.

func (FilevantageRuleGroupRuleOutput) Precedence

Precedence of the rule in the rule group.

func (FilevantageRuleGroupRuleOutput) RegistryValues

List of registry values whose content will be monitored. Listed registry values must match the registry include pattern and not match the registry exclude pattern.

func (FilevantageRuleGroupRuleOutput) Severity

Severity to categorize change events produced by this rule.

func (FilevantageRuleGroupRuleOutput) ToFilevantageRuleGroupRuleOutput

func (o FilevantageRuleGroupRuleOutput) ToFilevantageRuleGroupRuleOutput() FilevantageRuleGroupRuleOutput

func (FilevantageRuleGroupRuleOutput) ToFilevantageRuleGroupRuleOutputWithContext

func (o FilevantageRuleGroupRuleOutput) ToFilevantageRuleGroupRuleOutputWithContext(ctx context.Context) FilevantageRuleGroupRuleOutput

func (FilevantageRuleGroupRuleOutput) WatchDirectoryAttributeChanges

func (o FilevantageRuleGroupRuleOutput) WatchDirectoryAttributeChanges() pulumi.BoolPtrOutput

Monitor directory attribute change events.

func (FilevantageRuleGroupRuleOutput) WatchDirectoryCreateChanges

func (o FilevantageRuleGroupRuleOutput) WatchDirectoryCreateChanges() pulumi.BoolPtrOutput

Monitor directory creation events.

func (FilevantageRuleGroupRuleOutput) WatchDirectoryDeleteChanges

func (o FilevantageRuleGroupRuleOutput) WatchDirectoryDeleteChanges() pulumi.BoolPtrOutput

Monitor directory deletion events.

func (FilevantageRuleGroupRuleOutput) WatchDirectoryPermissionChanges

func (o FilevantageRuleGroupRuleOutput) WatchDirectoryPermissionChanges() pulumi.BoolPtrOutput

Monitor directory permission change events.

func (FilevantageRuleGroupRuleOutput) WatchDirectoryRenameChanges

func (o FilevantageRuleGroupRuleOutput) WatchDirectoryRenameChanges() pulumi.BoolPtrOutput

Monitor directory rename events.

func (FilevantageRuleGroupRuleOutput) WatchFileAttributeChanges

func (o FilevantageRuleGroupRuleOutput) WatchFileAttributeChanges() pulumi.BoolPtrOutput

Monitor file attribute change events.

func (FilevantageRuleGroupRuleOutput) WatchFileCreateChanges

func (o FilevantageRuleGroupRuleOutput) WatchFileCreateChanges() pulumi.BoolPtrOutput

Monitor file creation events.

func (FilevantageRuleGroupRuleOutput) WatchFileDeleteChanges

func (o FilevantageRuleGroupRuleOutput) WatchFileDeleteChanges() pulumi.BoolPtrOutput

Monitor file deletion events.

func (FilevantageRuleGroupRuleOutput) WatchFilePermissionChanges

func (o FilevantageRuleGroupRuleOutput) WatchFilePermissionChanges() pulumi.BoolPtrOutput

Monitor file permission change events.

func (FilevantageRuleGroupRuleOutput) WatchFileRenameChanges

func (o FilevantageRuleGroupRuleOutput) WatchFileRenameChanges() pulumi.BoolPtrOutput

Monitor file rename events.

func (FilevantageRuleGroupRuleOutput) WatchFileWriteChanges

func (o FilevantageRuleGroupRuleOutput) WatchFileWriteChanges() pulumi.BoolPtrOutput

Monitor file write events.

func (FilevantageRuleGroupRuleOutput) WatchKeyCreateChanges

func (o FilevantageRuleGroupRuleOutput) WatchKeyCreateChanges() pulumi.BoolPtrOutput

Monitor registry key creation events.

func (FilevantageRuleGroupRuleOutput) WatchKeyDeleteChanges

func (o FilevantageRuleGroupRuleOutput) WatchKeyDeleteChanges() pulumi.BoolPtrOutput

Monitor registry key deletion events.

func (FilevantageRuleGroupRuleOutput) WatchKeyPermissionsChanges

func (o FilevantageRuleGroupRuleOutput) WatchKeyPermissionsChanges() pulumi.BoolPtrOutput

Monitor registry key permission change events.

func (FilevantageRuleGroupRuleOutput) WatchKeyRenameChanges

func (o FilevantageRuleGroupRuleOutput) WatchKeyRenameChanges() pulumi.BoolPtrOutput

Monitor registry key rename events.

func (FilevantageRuleGroupRuleOutput) WatchKeyValueDeleteChanges

func (o FilevantageRuleGroupRuleOutput) WatchKeyValueDeleteChanges() pulumi.BoolPtrOutput

Monitor registry value deletion events.

func (FilevantageRuleGroupRuleOutput) WatchKeyValueSetChanges

func (o FilevantageRuleGroupRuleOutput) WatchKeyValueSetChanges() pulumi.BoolPtrOutput

Monitor registry value set events.

type FilevantageRuleGroupState

type FilevantageRuleGroupState struct {
	// Description of the filevantage rule group.
	Description pulumi.StringPtrInput
	LastUpdated pulumi.StringPtrInput
	// Name of the filevantage rule group.
	Name pulumi.StringPtrInput
	// Rules to be associated with the rule group. Precedence is determined by the order of the rules in the list.
	Rules FilevantageRuleGroupRuleArrayInput
	// The type of filevantage rule group.
	Type pulumi.StringPtrInput
}

func (FilevantageRuleGroupState) ElementType

func (FilevantageRuleGroupState) ElementType() reflect.Type

type GetCloudAwsAccountAccount

type GetCloudAwsAccountAccount struct {
	// The AWS Account ID
	AccountId string `pulumi:"accountId"`
	// The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
	AccountType string `pulumi:"accountType"`
	// Whether asset inventory is enabled
	AssetInventoryEnabled bool `pulumi:"assetInventoryEnabled"`
	// The name of the CloudTrail S3 bucket used for real-time visibility
	CloudtrailBucketName string `pulumi:"cloudtrailBucketName"`
	// The AWS region of the CloudTrail bucket
	CloudtrailRegion string `pulumi:"cloudtrailRegion"`
	// Whether Data Security Posture Management is enabled
	DspmEnabled bool `pulumi:"dspmEnabled"`
	// The ARN of the IAM role to be used by CrowdStrike DSPM
	DspmRoleArn string `pulumi:"dspmRoleArn"`
	// The name of the IAM role to be used by CrowdStrike DSPM
	DspmRoleName string `pulumi:"dspmRoleName"`
	// The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
	EventbusArn string `pulumi:"eventbusArn"`
	// The name of the Amazon EventBridge used by CrowdStrike to forward messages
	EventbusName string `pulumi:"eventbusName"`
	// The external ID used to assume the AWS IAM role
	ExternalId string `pulumi:"externalId"`
	// The ARN of the AWS IAM role used to access this AWS account
	IamRoleArn string `pulumi:"iamRoleArn"`
	// The name of the AWS IAM role used to access this AWS account
	IamRoleName string `pulumi:"iamRoleName"`
	// Whether Identity Protection is enabled
	IdpEnabled bool `pulumi:"idpEnabled"`
	// The ARN of the intermediate role used to assume the AWS IAM role
	IntermediateRoleArn string `pulumi:"intermediateRoleArn"`
	// Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
	IsOrganizationManagementAccount bool `pulumi:"isOrganizationManagementAccount"`
	// The AWS Organization ID
	OrganizationId string `pulumi:"organizationId"`
	// Whether real-time visibility is enabled
	RealtimeVisibilityEnabled bool `pulumi:"realtimeVisibilityEnabled"`
	// Whether 1-click sensor deployment is enabled
	SensorManagementEnabled bool `pulumi:"sensorManagementEnabled"`
	// The list of AWS Organizational Units (OUs) targeted for this account
	TargetOuses []string `pulumi:"targetOuses"`
}

type GetCloudAwsAccountAccountArgs

type GetCloudAwsAccountAccountArgs struct {
	// The AWS Account ID
	AccountId pulumi.StringInput `pulumi:"accountId"`
	// The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
	AccountType pulumi.StringInput `pulumi:"accountType"`
	// Whether asset inventory is enabled
	AssetInventoryEnabled pulumi.BoolInput `pulumi:"assetInventoryEnabled"`
	// The name of the CloudTrail S3 bucket used for real-time visibility
	CloudtrailBucketName pulumi.StringInput `pulumi:"cloudtrailBucketName"`
	// The AWS region of the CloudTrail bucket
	CloudtrailRegion pulumi.StringInput `pulumi:"cloudtrailRegion"`
	// Whether Data Security Posture Management is enabled
	DspmEnabled pulumi.BoolInput `pulumi:"dspmEnabled"`
	// The ARN of the IAM role to be used by CrowdStrike DSPM
	DspmRoleArn pulumi.StringInput `pulumi:"dspmRoleArn"`
	// The name of the IAM role to be used by CrowdStrike DSPM
	DspmRoleName pulumi.StringInput `pulumi:"dspmRoleName"`
	// The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
	EventbusArn pulumi.StringInput `pulumi:"eventbusArn"`
	// The name of the Amazon EventBridge used by CrowdStrike to forward messages
	EventbusName pulumi.StringInput `pulumi:"eventbusName"`
	// The external ID used to assume the AWS IAM role
	ExternalId pulumi.StringInput `pulumi:"externalId"`
	// The ARN of the AWS IAM role used to access this AWS account
	IamRoleArn pulumi.StringInput `pulumi:"iamRoleArn"`
	// The name of the AWS IAM role used to access this AWS account
	IamRoleName pulumi.StringInput `pulumi:"iamRoleName"`
	// Whether Identity Protection is enabled
	IdpEnabled pulumi.BoolInput `pulumi:"idpEnabled"`
	// The ARN of the intermediate role used to assume the AWS IAM role
	IntermediateRoleArn pulumi.StringInput `pulumi:"intermediateRoleArn"`
	// Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
	IsOrganizationManagementAccount pulumi.BoolInput `pulumi:"isOrganizationManagementAccount"`
	// The AWS Organization ID
	OrganizationId pulumi.StringInput `pulumi:"organizationId"`
	// Whether real-time visibility is enabled
	RealtimeVisibilityEnabled pulumi.BoolInput `pulumi:"realtimeVisibilityEnabled"`
	// Whether 1-click sensor deployment is enabled
	SensorManagementEnabled pulumi.BoolInput `pulumi:"sensorManagementEnabled"`
	// The list of AWS Organizational Units (OUs) targeted for this account
	TargetOuses pulumi.StringArrayInput `pulumi:"targetOuses"`
}

func (GetCloudAwsAccountAccountArgs) ElementType

func (GetCloudAwsAccountAccountArgs) ToGetCloudAwsAccountAccountOutput

func (i GetCloudAwsAccountAccountArgs) ToGetCloudAwsAccountAccountOutput() GetCloudAwsAccountAccountOutput

func (GetCloudAwsAccountAccountArgs) ToGetCloudAwsAccountAccountOutputWithContext

func (i GetCloudAwsAccountAccountArgs) ToGetCloudAwsAccountAccountOutputWithContext(ctx context.Context) GetCloudAwsAccountAccountOutput

type GetCloudAwsAccountAccountArray

type GetCloudAwsAccountAccountArray []GetCloudAwsAccountAccountInput

func (GetCloudAwsAccountAccountArray) ElementType

func (GetCloudAwsAccountAccountArray) ToGetCloudAwsAccountAccountArrayOutput

func (i GetCloudAwsAccountAccountArray) ToGetCloudAwsAccountAccountArrayOutput() GetCloudAwsAccountAccountArrayOutput

func (GetCloudAwsAccountAccountArray) ToGetCloudAwsAccountAccountArrayOutputWithContext

func (i GetCloudAwsAccountAccountArray) ToGetCloudAwsAccountAccountArrayOutputWithContext(ctx context.Context) GetCloudAwsAccountAccountArrayOutput

type GetCloudAwsAccountAccountArrayInput

type GetCloudAwsAccountAccountArrayInput interface {
	pulumi.Input

	ToGetCloudAwsAccountAccountArrayOutput() GetCloudAwsAccountAccountArrayOutput
	ToGetCloudAwsAccountAccountArrayOutputWithContext(context.Context) GetCloudAwsAccountAccountArrayOutput
}

GetCloudAwsAccountAccountArrayInput is an input type that accepts GetCloudAwsAccountAccountArray and GetCloudAwsAccountAccountArrayOutput values. You can construct a concrete instance of `GetCloudAwsAccountAccountArrayInput` via:

GetCloudAwsAccountAccountArray{ GetCloudAwsAccountAccountArgs{...} }

type GetCloudAwsAccountAccountArrayOutput

type GetCloudAwsAccountAccountArrayOutput struct{ *pulumi.OutputState }

func (GetCloudAwsAccountAccountArrayOutput) ElementType

func (GetCloudAwsAccountAccountArrayOutput) Index

func (GetCloudAwsAccountAccountArrayOutput) ToGetCloudAwsAccountAccountArrayOutput

func (o GetCloudAwsAccountAccountArrayOutput) ToGetCloudAwsAccountAccountArrayOutput() GetCloudAwsAccountAccountArrayOutput

func (GetCloudAwsAccountAccountArrayOutput) ToGetCloudAwsAccountAccountArrayOutputWithContext

func (o GetCloudAwsAccountAccountArrayOutput) ToGetCloudAwsAccountAccountArrayOutputWithContext(ctx context.Context) GetCloudAwsAccountAccountArrayOutput

type GetCloudAwsAccountAccountInput

type GetCloudAwsAccountAccountInput interface {
	pulumi.Input

	ToGetCloudAwsAccountAccountOutput() GetCloudAwsAccountAccountOutput
	ToGetCloudAwsAccountAccountOutputWithContext(context.Context) GetCloudAwsAccountAccountOutput
}

GetCloudAwsAccountAccountInput is an input type that accepts GetCloudAwsAccountAccountArgs and GetCloudAwsAccountAccountOutput values. You can construct a concrete instance of `GetCloudAwsAccountAccountInput` via:

GetCloudAwsAccountAccountArgs{...}

type GetCloudAwsAccountAccountOutput

type GetCloudAwsAccountAccountOutput struct{ *pulumi.OutputState }

func (GetCloudAwsAccountAccountOutput) AccountId

The AWS Account ID

func (GetCloudAwsAccountAccountOutput) AccountType

The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type

func (GetCloudAwsAccountAccountOutput) AssetInventoryEnabled

func (o GetCloudAwsAccountAccountOutput) AssetInventoryEnabled() pulumi.BoolOutput

Whether asset inventory is enabled

func (GetCloudAwsAccountAccountOutput) CloudtrailBucketName

func (o GetCloudAwsAccountAccountOutput) CloudtrailBucketName() pulumi.StringOutput

The name of the CloudTrail S3 bucket used for real-time visibility

func (GetCloudAwsAccountAccountOutput) CloudtrailRegion

The AWS region of the CloudTrail bucket

func (GetCloudAwsAccountAccountOutput) DspmEnabled

Whether Data Security Posture Management is enabled

func (GetCloudAwsAccountAccountOutput) DspmRoleArn

The ARN of the IAM role to be used by CrowdStrike DSPM

func (GetCloudAwsAccountAccountOutput) DspmRoleName

The name of the IAM role to be used by CrowdStrike DSPM

func (GetCloudAwsAccountAccountOutput) ElementType

func (GetCloudAwsAccountAccountOutput) EventbusArn

The ARN of the Amazon EventBridge used by CrowdStrike to forward messages

func (GetCloudAwsAccountAccountOutput) EventbusName

The name of the Amazon EventBridge used by CrowdStrike to forward messages

func (GetCloudAwsAccountAccountOutput) ExternalId

The external ID used to assume the AWS IAM role

func (GetCloudAwsAccountAccountOutput) IamRoleArn

The ARN of the AWS IAM role used to access this AWS account

func (GetCloudAwsAccountAccountOutput) IamRoleName

The name of the AWS IAM role used to access this AWS account

func (GetCloudAwsAccountAccountOutput) IdpEnabled

Whether Identity Protection is enabled

func (GetCloudAwsAccountAccountOutput) IntermediateRoleArn

func (o GetCloudAwsAccountAccountOutput) IntermediateRoleArn() pulumi.StringOutput

The ARN of the intermediate role used to assume the AWS IAM role

func (GetCloudAwsAccountAccountOutput) IsOrganizationManagementAccount

func (o GetCloudAwsAccountAccountOutput) IsOrganizationManagementAccount() pulumi.BoolOutput

Indicates whether this is the management account (formerly known as the root account) of an AWS Organization

func (GetCloudAwsAccountAccountOutput) OrganizationId

The AWS Organization ID

func (GetCloudAwsAccountAccountOutput) RealtimeVisibilityEnabled

func (o GetCloudAwsAccountAccountOutput) RealtimeVisibilityEnabled() pulumi.BoolOutput

Whether real-time visibility is enabled

func (GetCloudAwsAccountAccountOutput) SensorManagementEnabled

func (o GetCloudAwsAccountAccountOutput) SensorManagementEnabled() pulumi.BoolOutput

Whether 1-click sensor deployment is enabled

func (GetCloudAwsAccountAccountOutput) TargetOuses

The list of AWS Organizational Units (OUs) targeted for this account

func (GetCloudAwsAccountAccountOutput) ToGetCloudAwsAccountAccountOutput

func (o GetCloudAwsAccountAccountOutput) ToGetCloudAwsAccountAccountOutput() GetCloudAwsAccountAccountOutput

func (GetCloudAwsAccountAccountOutput) ToGetCloudAwsAccountAccountOutputWithContext

func (o GetCloudAwsAccountAccountOutput) ToGetCloudAwsAccountAccountOutputWithContext(ctx context.Context) GetCloudAwsAccountAccountOutput

type GetSensorUpdatePolicyBuildsLinux

type GetSensorUpdatePolicyBuildsLinux struct {
	// All sensor builds for the specific platform.
	Alls []GetSensorUpdatePolicyBuildsLinuxAll `pulumi:"alls"`
	// The latest sensor build.
	Latest GetSensorUpdatePolicyBuildsLinuxLatest `pulumi:"latest"`
	// The n-1 sensor build.
	N1 GetSensorUpdatePolicyBuildsLinuxN1 `pulumi:"n1"`
	// The n-2 sensor build.
	N2 GetSensorUpdatePolicyBuildsLinuxN2 `pulumi:"n2"`
}

type GetSensorUpdatePolicyBuildsLinuxAll

type GetSensorUpdatePolicyBuildsLinuxAll struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsLinuxAllArgs

type GetSensorUpdatePolicyBuildsLinuxAllArgs struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsLinuxAllArgs) ElementType

func (GetSensorUpdatePolicyBuildsLinuxAllArgs) ToGetSensorUpdatePolicyBuildsLinuxAllOutput

func (i GetSensorUpdatePolicyBuildsLinuxAllArgs) ToGetSensorUpdatePolicyBuildsLinuxAllOutput() GetSensorUpdatePolicyBuildsLinuxAllOutput

func (GetSensorUpdatePolicyBuildsLinuxAllArgs) ToGetSensorUpdatePolicyBuildsLinuxAllOutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxAllArgs) ToGetSensorUpdatePolicyBuildsLinuxAllOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxAllOutput

type GetSensorUpdatePolicyBuildsLinuxAllArray

type GetSensorUpdatePolicyBuildsLinuxAllArray []GetSensorUpdatePolicyBuildsLinuxAllInput

func (GetSensorUpdatePolicyBuildsLinuxAllArray) ElementType

func (GetSensorUpdatePolicyBuildsLinuxAllArray) ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutput

func (i GetSensorUpdatePolicyBuildsLinuxAllArray) ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutput() GetSensorUpdatePolicyBuildsLinuxAllArrayOutput

func (GetSensorUpdatePolicyBuildsLinuxAllArray) ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxAllArray) ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxAllArrayOutput

type GetSensorUpdatePolicyBuildsLinuxAllArrayInput

type GetSensorUpdatePolicyBuildsLinuxAllArrayInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutput() GetSensorUpdatePolicyBuildsLinuxAllArrayOutput
	ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxAllArrayOutput
}

GetSensorUpdatePolicyBuildsLinuxAllArrayInput is an input type that accepts GetSensorUpdatePolicyBuildsLinuxAllArray and GetSensorUpdatePolicyBuildsLinuxAllArrayOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxAllArrayInput` via:

GetSensorUpdatePolicyBuildsLinuxAllArray{ GetSensorUpdatePolicyBuildsLinuxAllArgs{...} }

type GetSensorUpdatePolicyBuildsLinuxAllArrayOutput

type GetSensorUpdatePolicyBuildsLinuxAllArrayOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxAllArrayOutput) ElementType

func (GetSensorUpdatePolicyBuildsLinuxAllArrayOutput) Index

func (GetSensorUpdatePolicyBuildsLinuxAllArrayOutput) ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutput

func (o GetSensorUpdatePolicyBuildsLinuxAllArrayOutput) ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutput() GetSensorUpdatePolicyBuildsLinuxAllArrayOutput

func (GetSensorUpdatePolicyBuildsLinuxAllArrayOutput) ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxAllArrayOutput) ToGetSensorUpdatePolicyBuildsLinuxAllArrayOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxAllArrayOutput

type GetSensorUpdatePolicyBuildsLinuxAllInput

type GetSensorUpdatePolicyBuildsLinuxAllInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxAllOutput() GetSensorUpdatePolicyBuildsLinuxAllOutput
	ToGetSensorUpdatePolicyBuildsLinuxAllOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxAllOutput
}

GetSensorUpdatePolicyBuildsLinuxAllInput is an input type that accepts GetSensorUpdatePolicyBuildsLinuxAllArgs and GetSensorUpdatePolicyBuildsLinuxAllOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxAllInput` via:

GetSensorUpdatePolicyBuildsLinuxAllArgs{...}

type GetSensorUpdatePolicyBuildsLinuxAllOutput

type GetSensorUpdatePolicyBuildsLinuxAllOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxAllOutput) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsLinuxAllOutput) ElementType

func (GetSensorUpdatePolicyBuildsLinuxAllOutput) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsLinuxAllOutput) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsLinuxAllOutput) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsLinuxAllOutput) ToGetSensorUpdatePolicyBuildsLinuxAllOutput

func (o GetSensorUpdatePolicyBuildsLinuxAllOutput) ToGetSensorUpdatePolicyBuildsLinuxAllOutput() GetSensorUpdatePolicyBuildsLinuxAllOutput

func (GetSensorUpdatePolicyBuildsLinuxAllOutput) ToGetSensorUpdatePolicyBuildsLinuxAllOutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxAllOutput) ToGetSensorUpdatePolicyBuildsLinuxAllOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxAllOutput

type GetSensorUpdatePolicyBuildsLinuxArgs

type GetSensorUpdatePolicyBuildsLinuxArgs struct {
	// All sensor builds for the specific platform.
	Alls GetSensorUpdatePolicyBuildsLinuxAllArrayInput `pulumi:"alls"`
	// The latest sensor build.
	Latest GetSensorUpdatePolicyBuildsLinuxLatestInput `pulumi:"latest"`
	// The n-1 sensor build.
	N1 GetSensorUpdatePolicyBuildsLinuxN1Input `pulumi:"n1"`
	// The n-2 sensor build.
	N2 GetSensorUpdatePolicyBuildsLinuxN2Input `pulumi:"n2"`
}

func (GetSensorUpdatePolicyBuildsLinuxArgs) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArgs) ToGetSensorUpdatePolicyBuildsLinuxOutput

func (i GetSensorUpdatePolicyBuildsLinuxArgs) ToGetSensorUpdatePolicyBuildsLinuxOutput() GetSensorUpdatePolicyBuildsLinuxOutput

func (GetSensorUpdatePolicyBuildsLinuxArgs) ToGetSensorUpdatePolicyBuildsLinuxOutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxArgs) ToGetSensorUpdatePolicyBuildsLinuxOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxOutput

type GetSensorUpdatePolicyBuildsLinuxArm64

type GetSensorUpdatePolicyBuildsLinuxArm64 struct {
	// All sensor builds for the specific platform.
	Alls []GetSensorUpdatePolicyBuildsLinuxArm64All `pulumi:"alls"`
	// The latest sensor build.
	Latest GetSensorUpdatePolicyBuildsLinuxArm64Latest `pulumi:"latest"`
	// The n-1 sensor build.
	N1 GetSensorUpdatePolicyBuildsLinuxArm64N1 `pulumi:"n1"`
	// The n-2 sensor build.
	N2 GetSensorUpdatePolicyBuildsLinuxArm64N2 `pulumi:"n2"`
}

type GetSensorUpdatePolicyBuildsLinuxArm64All

type GetSensorUpdatePolicyBuildsLinuxArm64All struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsLinuxArm64AllArgs

type GetSensorUpdatePolicyBuildsLinuxArm64AllArgs struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArgs) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArgs) ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutput

func (i GetSensorUpdatePolicyBuildsLinuxArm64AllArgs) ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutput() GetSensorUpdatePolicyBuildsLinuxArm64AllOutput

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArgs) ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxArm64AllArgs) ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64AllOutput

type GetSensorUpdatePolicyBuildsLinuxArm64AllArray

type GetSensorUpdatePolicyBuildsLinuxArm64AllArray []GetSensorUpdatePolicyBuildsLinuxArm64AllInput

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArray) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArray) ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput

func (i GetSensorUpdatePolicyBuildsLinuxArm64AllArray) ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput() GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArray) ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxArm64AllArray) ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput

type GetSensorUpdatePolicyBuildsLinuxArm64AllArrayInput

type GetSensorUpdatePolicyBuildsLinuxArm64AllArrayInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput() GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput
	ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput
}

GetSensorUpdatePolicyBuildsLinuxArm64AllArrayInput is an input type that accepts GetSensorUpdatePolicyBuildsLinuxArm64AllArray and GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxArm64AllArrayInput` via:

GetSensorUpdatePolicyBuildsLinuxArm64AllArray{ GetSensorUpdatePolicyBuildsLinuxArm64AllArgs{...} }

type GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput

type GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput) Index

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput

func (o GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput() GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput

func (GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64AllArrayOutput

type GetSensorUpdatePolicyBuildsLinuxArm64AllInput

type GetSensorUpdatePolicyBuildsLinuxArm64AllInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutput() GetSensorUpdatePolicyBuildsLinuxArm64AllOutput
	ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxArm64AllOutput
}

GetSensorUpdatePolicyBuildsLinuxArm64AllInput is an input type that accepts GetSensorUpdatePolicyBuildsLinuxArm64AllArgs and GetSensorUpdatePolicyBuildsLinuxArm64AllOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxArm64AllInput` via:

GetSensorUpdatePolicyBuildsLinuxArm64AllArgs{...}

type GetSensorUpdatePolicyBuildsLinuxArm64AllOutput

type GetSensorUpdatePolicyBuildsLinuxArm64AllOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxArm64AllOutput) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsLinuxArm64AllOutput) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64AllOutput) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsLinuxArm64AllOutput) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsLinuxArm64AllOutput) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsLinuxArm64AllOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutput

func (o GetSensorUpdatePolicyBuildsLinuxArm64AllOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutput() GetSensorUpdatePolicyBuildsLinuxArm64AllOutput

func (GetSensorUpdatePolicyBuildsLinuxArm64AllOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxArm64AllOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64AllOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64AllOutput

type GetSensorUpdatePolicyBuildsLinuxArm64Args

type GetSensorUpdatePolicyBuildsLinuxArm64Args struct {
	// All sensor builds for the specific platform.
	Alls GetSensorUpdatePolicyBuildsLinuxArm64AllArrayInput `pulumi:"alls"`
	// The latest sensor build.
	Latest GetSensorUpdatePolicyBuildsLinuxArm64LatestInput `pulumi:"latest"`
	// The n-1 sensor build.
	N1 GetSensorUpdatePolicyBuildsLinuxArm64N1Input `pulumi:"n1"`
	// The n-2 sensor build.
	N2 GetSensorUpdatePolicyBuildsLinuxArm64N2Input `pulumi:"n2"`
}

func (GetSensorUpdatePolicyBuildsLinuxArm64Args) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64Args) ToGetSensorUpdatePolicyBuildsLinuxArm64Output

func (i GetSensorUpdatePolicyBuildsLinuxArm64Args) ToGetSensorUpdatePolicyBuildsLinuxArm64Output() GetSensorUpdatePolicyBuildsLinuxArm64Output

func (GetSensorUpdatePolicyBuildsLinuxArm64Args) ToGetSensorUpdatePolicyBuildsLinuxArm64OutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxArm64Args) ToGetSensorUpdatePolicyBuildsLinuxArm64OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64Output

type GetSensorUpdatePolicyBuildsLinuxArm64Input

type GetSensorUpdatePolicyBuildsLinuxArm64Input interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxArm64Output() GetSensorUpdatePolicyBuildsLinuxArm64Output
	ToGetSensorUpdatePolicyBuildsLinuxArm64OutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxArm64Output
}

GetSensorUpdatePolicyBuildsLinuxArm64Input is an input type that accepts GetSensorUpdatePolicyBuildsLinuxArm64Args and GetSensorUpdatePolicyBuildsLinuxArm64Output values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxArm64Input` via:

GetSensorUpdatePolicyBuildsLinuxArm64Args{...}

type GetSensorUpdatePolicyBuildsLinuxArm64Latest

type GetSensorUpdatePolicyBuildsLinuxArm64Latest struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsLinuxArm64LatestArgs

type GetSensorUpdatePolicyBuildsLinuxArm64LatestArgs struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestArgs) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestArgs) ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutput

func (i GetSensorUpdatePolicyBuildsLinuxArm64LatestArgs) ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutput() GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestArgs) ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxArm64LatestArgs) ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput

type GetSensorUpdatePolicyBuildsLinuxArm64LatestInput

type GetSensorUpdatePolicyBuildsLinuxArm64LatestInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutput() GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput
	ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput
}

GetSensorUpdatePolicyBuildsLinuxArm64LatestInput is an input type that accepts GetSensorUpdatePolicyBuildsLinuxArm64LatestArgs and GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxArm64LatestInput` via:

GetSensorUpdatePolicyBuildsLinuxArm64LatestArgs{...}

type GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput

type GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutput

func (o GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutput() GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput

func (GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput) ToGetSensorUpdatePolicyBuildsLinuxArm64LatestOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64LatestOutput

type GetSensorUpdatePolicyBuildsLinuxArm64N1

type GetSensorUpdatePolicyBuildsLinuxArm64N1 struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsLinuxArm64N1Args

type GetSensorUpdatePolicyBuildsLinuxArm64N1Args struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Args) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Args) ToGetSensorUpdatePolicyBuildsLinuxArm64N1Output

func (i GetSensorUpdatePolicyBuildsLinuxArm64N1Args) ToGetSensorUpdatePolicyBuildsLinuxArm64N1Output() GetSensorUpdatePolicyBuildsLinuxArm64N1Output

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Args) ToGetSensorUpdatePolicyBuildsLinuxArm64N1OutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxArm64N1Args) ToGetSensorUpdatePolicyBuildsLinuxArm64N1OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64N1Output

type GetSensorUpdatePolicyBuildsLinuxArm64N1Input

type GetSensorUpdatePolicyBuildsLinuxArm64N1Input interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxArm64N1Output() GetSensorUpdatePolicyBuildsLinuxArm64N1Output
	ToGetSensorUpdatePolicyBuildsLinuxArm64N1OutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxArm64N1Output
}

GetSensorUpdatePolicyBuildsLinuxArm64N1Input is an input type that accepts GetSensorUpdatePolicyBuildsLinuxArm64N1Args and GetSensorUpdatePolicyBuildsLinuxArm64N1Output values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxArm64N1Input` via:

GetSensorUpdatePolicyBuildsLinuxArm64N1Args{...}

type GetSensorUpdatePolicyBuildsLinuxArm64N1Output

type GetSensorUpdatePolicyBuildsLinuxArm64N1Output struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Output) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Output) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Output) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Output) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Output) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Output) ToGetSensorUpdatePolicyBuildsLinuxArm64N1Output

func (o GetSensorUpdatePolicyBuildsLinuxArm64N1Output) ToGetSensorUpdatePolicyBuildsLinuxArm64N1Output() GetSensorUpdatePolicyBuildsLinuxArm64N1Output

func (GetSensorUpdatePolicyBuildsLinuxArm64N1Output) ToGetSensorUpdatePolicyBuildsLinuxArm64N1OutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxArm64N1Output) ToGetSensorUpdatePolicyBuildsLinuxArm64N1OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64N1Output

type GetSensorUpdatePolicyBuildsLinuxArm64N2

type GetSensorUpdatePolicyBuildsLinuxArm64N2 struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsLinuxArm64N2Args

type GetSensorUpdatePolicyBuildsLinuxArm64N2Args struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Args) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Args) ToGetSensorUpdatePolicyBuildsLinuxArm64N2Output

func (i GetSensorUpdatePolicyBuildsLinuxArm64N2Args) ToGetSensorUpdatePolicyBuildsLinuxArm64N2Output() GetSensorUpdatePolicyBuildsLinuxArm64N2Output

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Args) ToGetSensorUpdatePolicyBuildsLinuxArm64N2OutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxArm64N2Args) ToGetSensorUpdatePolicyBuildsLinuxArm64N2OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64N2Output

type GetSensorUpdatePolicyBuildsLinuxArm64N2Input

type GetSensorUpdatePolicyBuildsLinuxArm64N2Input interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxArm64N2Output() GetSensorUpdatePolicyBuildsLinuxArm64N2Output
	ToGetSensorUpdatePolicyBuildsLinuxArm64N2OutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxArm64N2Output
}

GetSensorUpdatePolicyBuildsLinuxArm64N2Input is an input type that accepts GetSensorUpdatePolicyBuildsLinuxArm64N2Args and GetSensorUpdatePolicyBuildsLinuxArm64N2Output values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxArm64N2Input` via:

GetSensorUpdatePolicyBuildsLinuxArm64N2Args{...}

type GetSensorUpdatePolicyBuildsLinuxArm64N2Output

type GetSensorUpdatePolicyBuildsLinuxArm64N2Output struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Output) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Output) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Output) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Output) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Output) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Output) ToGetSensorUpdatePolicyBuildsLinuxArm64N2Output

func (o GetSensorUpdatePolicyBuildsLinuxArm64N2Output) ToGetSensorUpdatePolicyBuildsLinuxArm64N2Output() GetSensorUpdatePolicyBuildsLinuxArm64N2Output

func (GetSensorUpdatePolicyBuildsLinuxArm64N2Output) ToGetSensorUpdatePolicyBuildsLinuxArm64N2OutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxArm64N2Output) ToGetSensorUpdatePolicyBuildsLinuxArm64N2OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64N2Output

type GetSensorUpdatePolicyBuildsLinuxArm64Output

type GetSensorUpdatePolicyBuildsLinuxArm64Output struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxArm64Output) Alls

All sensor builds for the specific platform.

func (GetSensorUpdatePolicyBuildsLinuxArm64Output) ElementType

func (GetSensorUpdatePolicyBuildsLinuxArm64Output) Latest

The latest sensor build.

func (GetSensorUpdatePolicyBuildsLinuxArm64Output) N1

The n-1 sensor build.

func (GetSensorUpdatePolicyBuildsLinuxArm64Output) N2

The n-2 sensor build.

func (GetSensorUpdatePolicyBuildsLinuxArm64Output) ToGetSensorUpdatePolicyBuildsLinuxArm64Output

func (o GetSensorUpdatePolicyBuildsLinuxArm64Output) ToGetSensorUpdatePolicyBuildsLinuxArm64Output() GetSensorUpdatePolicyBuildsLinuxArm64Output

func (GetSensorUpdatePolicyBuildsLinuxArm64Output) ToGetSensorUpdatePolicyBuildsLinuxArm64OutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxArm64Output) ToGetSensorUpdatePolicyBuildsLinuxArm64OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxArm64Output

type GetSensorUpdatePolicyBuildsLinuxInput

type GetSensorUpdatePolicyBuildsLinuxInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxOutput() GetSensorUpdatePolicyBuildsLinuxOutput
	ToGetSensorUpdatePolicyBuildsLinuxOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxOutput
}

GetSensorUpdatePolicyBuildsLinuxInput is an input type that accepts GetSensorUpdatePolicyBuildsLinuxArgs and GetSensorUpdatePolicyBuildsLinuxOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxInput` via:

GetSensorUpdatePolicyBuildsLinuxArgs{...}

type GetSensorUpdatePolicyBuildsLinuxLatest

type GetSensorUpdatePolicyBuildsLinuxLatest struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsLinuxLatestArgs

type GetSensorUpdatePolicyBuildsLinuxLatestArgs struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsLinuxLatestArgs) ElementType

func (GetSensorUpdatePolicyBuildsLinuxLatestArgs) ToGetSensorUpdatePolicyBuildsLinuxLatestOutput

func (i GetSensorUpdatePolicyBuildsLinuxLatestArgs) ToGetSensorUpdatePolicyBuildsLinuxLatestOutput() GetSensorUpdatePolicyBuildsLinuxLatestOutput

func (GetSensorUpdatePolicyBuildsLinuxLatestArgs) ToGetSensorUpdatePolicyBuildsLinuxLatestOutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxLatestArgs) ToGetSensorUpdatePolicyBuildsLinuxLatestOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxLatestOutput

type GetSensorUpdatePolicyBuildsLinuxLatestInput

type GetSensorUpdatePolicyBuildsLinuxLatestInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxLatestOutput() GetSensorUpdatePolicyBuildsLinuxLatestOutput
	ToGetSensorUpdatePolicyBuildsLinuxLatestOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxLatestOutput
}

GetSensorUpdatePolicyBuildsLinuxLatestInput is an input type that accepts GetSensorUpdatePolicyBuildsLinuxLatestArgs and GetSensorUpdatePolicyBuildsLinuxLatestOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxLatestInput` via:

GetSensorUpdatePolicyBuildsLinuxLatestArgs{...}

type GetSensorUpdatePolicyBuildsLinuxLatestOutput

type GetSensorUpdatePolicyBuildsLinuxLatestOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxLatestOutput) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsLinuxLatestOutput) ElementType

func (GetSensorUpdatePolicyBuildsLinuxLatestOutput) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsLinuxLatestOutput) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsLinuxLatestOutput) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsLinuxLatestOutput) ToGetSensorUpdatePolicyBuildsLinuxLatestOutput

func (o GetSensorUpdatePolicyBuildsLinuxLatestOutput) ToGetSensorUpdatePolicyBuildsLinuxLatestOutput() GetSensorUpdatePolicyBuildsLinuxLatestOutput

func (GetSensorUpdatePolicyBuildsLinuxLatestOutput) ToGetSensorUpdatePolicyBuildsLinuxLatestOutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxLatestOutput) ToGetSensorUpdatePolicyBuildsLinuxLatestOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxLatestOutput

type GetSensorUpdatePolicyBuildsLinuxN1

type GetSensorUpdatePolicyBuildsLinuxN1 struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsLinuxN1Args

type GetSensorUpdatePolicyBuildsLinuxN1Args struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsLinuxN1Args) ElementType

func (GetSensorUpdatePolicyBuildsLinuxN1Args) ToGetSensorUpdatePolicyBuildsLinuxN1Output

func (i GetSensorUpdatePolicyBuildsLinuxN1Args) ToGetSensorUpdatePolicyBuildsLinuxN1Output() GetSensorUpdatePolicyBuildsLinuxN1Output

func (GetSensorUpdatePolicyBuildsLinuxN1Args) ToGetSensorUpdatePolicyBuildsLinuxN1OutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxN1Args) ToGetSensorUpdatePolicyBuildsLinuxN1OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxN1Output

type GetSensorUpdatePolicyBuildsLinuxN1Input

type GetSensorUpdatePolicyBuildsLinuxN1Input interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxN1Output() GetSensorUpdatePolicyBuildsLinuxN1Output
	ToGetSensorUpdatePolicyBuildsLinuxN1OutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxN1Output
}

GetSensorUpdatePolicyBuildsLinuxN1Input is an input type that accepts GetSensorUpdatePolicyBuildsLinuxN1Args and GetSensorUpdatePolicyBuildsLinuxN1Output values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxN1Input` via:

GetSensorUpdatePolicyBuildsLinuxN1Args{...}

type GetSensorUpdatePolicyBuildsLinuxN1Output

type GetSensorUpdatePolicyBuildsLinuxN1Output struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxN1Output) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsLinuxN1Output) ElementType

func (GetSensorUpdatePolicyBuildsLinuxN1Output) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsLinuxN1Output) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsLinuxN1Output) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsLinuxN1Output) ToGetSensorUpdatePolicyBuildsLinuxN1Output

func (o GetSensorUpdatePolicyBuildsLinuxN1Output) ToGetSensorUpdatePolicyBuildsLinuxN1Output() GetSensorUpdatePolicyBuildsLinuxN1Output

func (GetSensorUpdatePolicyBuildsLinuxN1Output) ToGetSensorUpdatePolicyBuildsLinuxN1OutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxN1Output) ToGetSensorUpdatePolicyBuildsLinuxN1OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxN1Output

type GetSensorUpdatePolicyBuildsLinuxN2

type GetSensorUpdatePolicyBuildsLinuxN2 struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsLinuxN2Args

type GetSensorUpdatePolicyBuildsLinuxN2Args struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsLinuxN2Args) ElementType

func (GetSensorUpdatePolicyBuildsLinuxN2Args) ToGetSensorUpdatePolicyBuildsLinuxN2Output

func (i GetSensorUpdatePolicyBuildsLinuxN2Args) ToGetSensorUpdatePolicyBuildsLinuxN2Output() GetSensorUpdatePolicyBuildsLinuxN2Output

func (GetSensorUpdatePolicyBuildsLinuxN2Args) ToGetSensorUpdatePolicyBuildsLinuxN2OutputWithContext

func (i GetSensorUpdatePolicyBuildsLinuxN2Args) ToGetSensorUpdatePolicyBuildsLinuxN2OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxN2Output

type GetSensorUpdatePolicyBuildsLinuxN2Input

type GetSensorUpdatePolicyBuildsLinuxN2Input interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsLinuxN2Output() GetSensorUpdatePolicyBuildsLinuxN2Output
	ToGetSensorUpdatePolicyBuildsLinuxN2OutputWithContext(context.Context) GetSensorUpdatePolicyBuildsLinuxN2Output
}

GetSensorUpdatePolicyBuildsLinuxN2Input is an input type that accepts GetSensorUpdatePolicyBuildsLinuxN2Args and GetSensorUpdatePolicyBuildsLinuxN2Output values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsLinuxN2Input` via:

GetSensorUpdatePolicyBuildsLinuxN2Args{...}

type GetSensorUpdatePolicyBuildsLinuxN2Output

type GetSensorUpdatePolicyBuildsLinuxN2Output struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxN2Output) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsLinuxN2Output) ElementType

func (GetSensorUpdatePolicyBuildsLinuxN2Output) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsLinuxN2Output) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsLinuxN2Output) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsLinuxN2Output) ToGetSensorUpdatePolicyBuildsLinuxN2Output

func (o GetSensorUpdatePolicyBuildsLinuxN2Output) ToGetSensorUpdatePolicyBuildsLinuxN2Output() GetSensorUpdatePolicyBuildsLinuxN2Output

func (GetSensorUpdatePolicyBuildsLinuxN2Output) ToGetSensorUpdatePolicyBuildsLinuxN2OutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxN2Output) ToGetSensorUpdatePolicyBuildsLinuxN2OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxN2Output

type GetSensorUpdatePolicyBuildsLinuxOutput

type GetSensorUpdatePolicyBuildsLinuxOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsLinuxOutput) Alls

All sensor builds for the specific platform.

func (GetSensorUpdatePolicyBuildsLinuxOutput) ElementType

func (GetSensorUpdatePolicyBuildsLinuxOutput) Latest

The latest sensor build.

func (GetSensorUpdatePolicyBuildsLinuxOutput) N1

The n-1 sensor build.

func (GetSensorUpdatePolicyBuildsLinuxOutput) N2

The n-2 sensor build.

func (GetSensorUpdatePolicyBuildsLinuxOutput) ToGetSensorUpdatePolicyBuildsLinuxOutput

func (o GetSensorUpdatePolicyBuildsLinuxOutput) ToGetSensorUpdatePolicyBuildsLinuxOutput() GetSensorUpdatePolicyBuildsLinuxOutput

func (GetSensorUpdatePolicyBuildsLinuxOutput) ToGetSensorUpdatePolicyBuildsLinuxOutputWithContext

func (o GetSensorUpdatePolicyBuildsLinuxOutput) ToGetSensorUpdatePolicyBuildsLinuxOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsLinuxOutput

type GetSensorUpdatePolicyBuildsMac

type GetSensorUpdatePolicyBuildsMac struct {
	// All sensor builds for the specific platform.
	Alls []GetSensorUpdatePolicyBuildsMacAll `pulumi:"alls"`
	// The latest sensor build.
	Latest GetSensorUpdatePolicyBuildsMacLatest `pulumi:"latest"`
	// The n-1 sensor build.
	N1 GetSensorUpdatePolicyBuildsMacN1 `pulumi:"n1"`
	// The n-2 sensor build.
	N2 GetSensorUpdatePolicyBuildsMacN2 `pulumi:"n2"`
}

type GetSensorUpdatePolicyBuildsMacAll

type GetSensorUpdatePolicyBuildsMacAll struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsMacAllArgs

type GetSensorUpdatePolicyBuildsMacAllArgs struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsMacAllArgs) ElementType

func (GetSensorUpdatePolicyBuildsMacAllArgs) ToGetSensorUpdatePolicyBuildsMacAllOutput

func (i GetSensorUpdatePolicyBuildsMacAllArgs) ToGetSensorUpdatePolicyBuildsMacAllOutput() GetSensorUpdatePolicyBuildsMacAllOutput

func (GetSensorUpdatePolicyBuildsMacAllArgs) ToGetSensorUpdatePolicyBuildsMacAllOutputWithContext

func (i GetSensorUpdatePolicyBuildsMacAllArgs) ToGetSensorUpdatePolicyBuildsMacAllOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacAllOutput

type GetSensorUpdatePolicyBuildsMacAllArray

type GetSensorUpdatePolicyBuildsMacAllArray []GetSensorUpdatePolicyBuildsMacAllInput

func (GetSensorUpdatePolicyBuildsMacAllArray) ElementType

func (GetSensorUpdatePolicyBuildsMacAllArray) ToGetSensorUpdatePolicyBuildsMacAllArrayOutput

func (i GetSensorUpdatePolicyBuildsMacAllArray) ToGetSensorUpdatePolicyBuildsMacAllArrayOutput() GetSensorUpdatePolicyBuildsMacAllArrayOutput

func (GetSensorUpdatePolicyBuildsMacAllArray) ToGetSensorUpdatePolicyBuildsMacAllArrayOutputWithContext

func (i GetSensorUpdatePolicyBuildsMacAllArray) ToGetSensorUpdatePolicyBuildsMacAllArrayOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacAllArrayOutput

type GetSensorUpdatePolicyBuildsMacAllArrayInput

type GetSensorUpdatePolicyBuildsMacAllArrayInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsMacAllArrayOutput() GetSensorUpdatePolicyBuildsMacAllArrayOutput
	ToGetSensorUpdatePolicyBuildsMacAllArrayOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsMacAllArrayOutput
}

GetSensorUpdatePolicyBuildsMacAllArrayInput is an input type that accepts GetSensorUpdatePolicyBuildsMacAllArray and GetSensorUpdatePolicyBuildsMacAllArrayOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsMacAllArrayInput` via:

GetSensorUpdatePolicyBuildsMacAllArray{ GetSensorUpdatePolicyBuildsMacAllArgs{...} }

type GetSensorUpdatePolicyBuildsMacAllArrayOutput

type GetSensorUpdatePolicyBuildsMacAllArrayOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsMacAllArrayOutput) ElementType

func (GetSensorUpdatePolicyBuildsMacAllArrayOutput) Index

func (GetSensorUpdatePolicyBuildsMacAllArrayOutput) ToGetSensorUpdatePolicyBuildsMacAllArrayOutput

func (o GetSensorUpdatePolicyBuildsMacAllArrayOutput) ToGetSensorUpdatePolicyBuildsMacAllArrayOutput() GetSensorUpdatePolicyBuildsMacAllArrayOutput

func (GetSensorUpdatePolicyBuildsMacAllArrayOutput) ToGetSensorUpdatePolicyBuildsMacAllArrayOutputWithContext

func (o GetSensorUpdatePolicyBuildsMacAllArrayOutput) ToGetSensorUpdatePolicyBuildsMacAllArrayOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacAllArrayOutput

type GetSensorUpdatePolicyBuildsMacAllInput

type GetSensorUpdatePolicyBuildsMacAllInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsMacAllOutput() GetSensorUpdatePolicyBuildsMacAllOutput
	ToGetSensorUpdatePolicyBuildsMacAllOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsMacAllOutput
}

GetSensorUpdatePolicyBuildsMacAllInput is an input type that accepts GetSensorUpdatePolicyBuildsMacAllArgs and GetSensorUpdatePolicyBuildsMacAllOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsMacAllInput` via:

GetSensorUpdatePolicyBuildsMacAllArgs{...}

type GetSensorUpdatePolicyBuildsMacAllOutput

type GetSensorUpdatePolicyBuildsMacAllOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsMacAllOutput) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsMacAllOutput) ElementType

func (GetSensorUpdatePolicyBuildsMacAllOutput) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsMacAllOutput) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsMacAllOutput) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsMacAllOutput) ToGetSensorUpdatePolicyBuildsMacAllOutput

func (o GetSensorUpdatePolicyBuildsMacAllOutput) ToGetSensorUpdatePolicyBuildsMacAllOutput() GetSensorUpdatePolicyBuildsMacAllOutput

func (GetSensorUpdatePolicyBuildsMacAllOutput) ToGetSensorUpdatePolicyBuildsMacAllOutputWithContext

func (o GetSensorUpdatePolicyBuildsMacAllOutput) ToGetSensorUpdatePolicyBuildsMacAllOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacAllOutput

type GetSensorUpdatePolicyBuildsMacArgs

type GetSensorUpdatePolicyBuildsMacArgs struct {
	// All sensor builds for the specific platform.
	Alls GetSensorUpdatePolicyBuildsMacAllArrayInput `pulumi:"alls"`
	// The latest sensor build.
	Latest GetSensorUpdatePolicyBuildsMacLatestInput `pulumi:"latest"`
	// The n-1 sensor build.
	N1 GetSensorUpdatePolicyBuildsMacN1Input `pulumi:"n1"`
	// The n-2 sensor build.
	N2 GetSensorUpdatePolicyBuildsMacN2Input `pulumi:"n2"`
}

func (GetSensorUpdatePolicyBuildsMacArgs) ElementType

func (GetSensorUpdatePolicyBuildsMacArgs) ToGetSensorUpdatePolicyBuildsMacOutput

func (i GetSensorUpdatePolicyBuildsMacArgs) ToGetSensorUpdatePolicyBuildsMacOutput() GetSensorUpdatePolicyBuildsMacOutput

func (GetSensorUpdatePolicyBuildsMacArgs) ToGetSensorUpdatePolicyBuildsMacOutputWithContext

func (i GetSensorUpdatePolicyBuildsMacArgs) ToGetSensorUpdatePolicyBuildsMacOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacOutput

type GetSensorUpdatePolicyBuildsMacInput

type GetSensorUpdatePolicyBuildsMacInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsMacOutput() GetSensorUpdatePolicyBuildsMacOutput
	ToGetSensorUpdatePolicyBuildsMacOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsMacOutput
}

GetSensorUpdatePolicyBuildsMacInput is an input type that accepts GetSensorUpdatePolicyBuildsMacArgs and GetSensorUpdatePolicyBuildsMacOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsMacInput` via:

GetSensorUpdatePolicyBuildsMacArgs{...}

type GetSensorUpdatePolicyBuildsMacLatest

type GetSensorUpdatePolicyBuildsMacLatest struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsMacLatestArgs

type GetSensorUpdatePolicyBuildsMacLatestArgs struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsMacLatestArgs) ElementType

func (GetSensorUpdatePolicyBuildsMacLatestArgs) ToGetSensorUpdatePolicyBuildsMacLatestOutput

func (i GetSensorUpdatePolicyBuildsMacLatestArgs) ToGetSensorUpdatePolicyBuildsMacLatestOutput() GetSensorUpdatePolicyBuildsMacLatestOutput

func (GetSensorUpdatePolicyBuildsMacLatestArgs) ToGetSensorUpdatePolicyBuildsMacLatestOutputWithContext

func (i GetSensorUpdatePolicyBuildsMacLatestArgs) ToGetSensorUpdatePolicyBuildsMacLatestOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacLatestOutput

type GetSensorUpdatePolicyBuildsMacLatestInput

type GetSensorUpdatePolicyBuildsMacLatestInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsMacLatestOutput() GetSensorUpdatePolicyBuildsMacLatestOutput
	ToGetSensorUpdatePolicyBuildsMacLatestOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsMacLatestOutput
}

GetSensorUpdatePolicyBuildsMacLatestInput is an input type that accepts GetSensorUpdatePolicyBuildsMacLatestArgs and GetSensorUpdatePolicyBuildsMacLatestOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsMacLatestInput` via:

GetSensorUpdatePolicyBuildsMacLatestArgs{...}

type GetSensorUpdatePolicyBuildsMacLatestOutput

type GetSensorUpdatePolicyBuildsMacLatestOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsMacLatestOutput) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsMacLatestOutput) ElementType

func (GetSensorUpdatePolicyBuildsMacLatestOutput) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsMacLatestOutput) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsMacLatestOutput) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsMacLatestOutput) ToGetSensorUpdatePolicyBuildsMacLatestOutput

func (o GetSensorUpdatePolicyBuildsMacLatestOutput) ToGetSensorUpdatePolicyBuildsMacLatestOutput() GetSensorUpdatePolicyBuildsMacLatestOutput

func (GetSensorUpdatePolicyBuildsMacLatestOutput) ToGetSensorUpdatePolicyBuildsMacLatestOutputWithContext

func (o GetSensorUpdatePolicyBuildsMacLatestOutput) ToGetSensorUpdatePolicyBuildsMacLatestOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacLatestOutput

type GetSensorUpdatePolicyBuildsMacN1

type GetSensorUpdatePolicyBuildsMacN1 struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsMacN1Args

type GetSensorUpdatePolicyBuildsMacN1Args struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsMacN1Args) ElementType

func (GetSensorUpdatePolicyBuildsMacN1Args) ToGetSensorUpdatePolicyBuildsMacN1Output

func (i GetSensorUpdatePolicyBuildsMacN1Args) ToGetSensorUpdatePolicyBuildsMacN1Output() GetSensorUpdatePolicyBuildsMacN1Output

func (GetSensorUpdatePolicyBuildsMacN1Args) ToGetSensorUpdatePolicyBuildsMacN1OutputWithContext

func (i GetSensorUpdatePolicyBuildsMacN1Args) ToGetSensorUpdatePolicyBuildsMacN1OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacN1Output

type GetSensorUpdatePolicyBuildsMacN1Input

type GetSensorUpdatePolicyBuildsMacN1Input interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsMacN1Output() GetSensorUpdatePolicyBuildsMacN1Output
	ToGetSensorUpdatePolicyBuildsMacN1OutputWithContext(context.Context) GetSensorUpdatePolicyBuildsMacN1Output
}

GetSensorUpdatePolicyBuildsMacN1Input is an input type that accepts GetSensorUpdatePolicyBuildsMacN1Args and GetSensorUpdatePolicyBuildsMacN1Output values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsMacN1Input` via:

GetSensorUpdatePolicyBuildsMacN1Args{...}

type GetSensorUpdatePolicyBuildsMacN1Output

type GetSensorUpdatePolicyBuildsMacN1Output struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsMacN1Output) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsMacN1Output) ElementType

func (GetSensorUpdatePolicyBuildsMacN1Output) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsMacN1Output) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsMacN1Output) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsMacN1Output) ToGetSensorUpdatePolicyBuildsMacN1Output

func (o GetSensorUpdatePolicyBuildsMacN1Output) ToGetSensorUpdatePolicyBuildsMacN1Output() GetSensorUpdatePolicyBuildsMacN1Output

func (GetSensorUpdatePolicyBuildsMacN1Output) ToGetSensorUpdatePolicyBuildsMacN1OutputWithContext

func (o GetSensorUpdatePolicyBuildsMacN1Output) ToGetSensorUpdatePolicyBuildsMacN1OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacN1Output

type GetSensorUpdatePolicyBuildsMacN2

type GetSensorUpdatePolicyBuildsMacN2 struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsMacN2Args

type GetSensorUpdatePolicyBuildsMacN2Args struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsMacN2Args) ElementType

func (GetSensorUpdatePolicyBuildsMacN2Args) ToGetSensorUpdatePolicyBuildsMacN2Output

func (i GetSensorUpdatePolicyBuildsMacN2Args) ToGetSensorUpdatePolicyBuildsMacN2Output() GetSensorUpdatePolicyBuildsMacN2Output

func (GetSensorUpdatePolicyBuildsMacN2Args) ToGetSensorUpdatePolicyBuildsMacN2OutputWithContext

func (i GetSensorUpdatePolicyBuildsMacN2Args) ToGetSensorUpdatePolicyBuildsMacN2OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacN2Output

type GetSensorUpdatePolicyBuildsMacN2Input

type GetSensorUpdatePolicyBuildsMacN2Input interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsMacN2Output() GetSensorUpdatePolicyBuildsMacN2Output
	ToGetSensorUpdatePolicyBuildsMacN2OutputWithContext(context.Context) GetSensorUpdatePolicyBuildsMacN2Output
}

GetSensorUpdatePolicyBuildsMacN2Input is an input type that accepts GetSensorUpdatePolicyBuildsMacN2Args and GetSensorUpdatePolicyBuildsMacN2Output values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsMacN2Input` via:

GetSensorUpdatePolicyBuildsMacN2Args{...}

type GetSensorUpdatePolicyBuildsMacN2Output

type GetSensorUpdatePolicyBuildsMacN2Output struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsMacN2Output) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsMacN2Output) ElementType

func (GetSensorUpdatePolicyBuildsMacN2Output) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsMacN2Output) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsMacN2Output) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsMacN2Output) ToGetSensorUpdatePolicyBuildsMacN2Output

func (o GetSensorUpdatePolicyBuildsMacN2Output) ToGetSensorUpdatePolicyBuildsMacN2Output() GetSensorUpdatePolicyBuildsMacN2Output

func (GetSensorUpdatePolicyBuildsMacN2Output) ToGetSensorUpdatePolicyBuildsMacN2OutputWithContext

func (o GetSensorUpdatePolicyBuildsMacN2Output) ToGetSensorUpdatePolicyBuildsMacN2OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacN2Output

type GetSensorUpdatePolicyBuildsMacOutput

type GetSensorUpdatePolicyBuildsMacOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsMacOutput) Alls

All sensor builds for the specific platform.

func (GetSensorUpdatePolicyBuildsMacOutput) ElementType

func (GetSensorUpdatePolicyBuildsMacOutput) Latest

The latest sensor build.

func (GetSensorUpdatePolicyBuildsMacOutput) N1

The n-1 sensor build.

func (GetSensorUpdatePolicyBuildsMacOutput) N2

The n-2 sensor build.

func (GetSensorUpdatePolicyBuildsMacOutput) ToGetSensorUpdatePolicyBuildsMacOutput

func (o GetSensorUpdatePolicyBuildsMacOutput) ToGetSensorUpdatePolicyBuildsMacOutput() GetSensorUpdatePolicyBuildsMacOutput

func (GetSensorUpdatePolicyBuildsMacOutput) ToGetSensorUpdatePolicyBuildsMacOutputWithContext

func (o GetSensorUpdatePolicyBuildsMacOutput) ToGetSensorUpdatePolicyBuildsMacOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsMacOutput

type GetSensorUpdatePolicyBuildsResult

type GetSensorUpdatePolicyBuildsResult struct {
	// Placeholder identifier.
	Id string `pulumi:"id"`
	// Builds for the Linux platform.
	Linux GetSensorUpdatePolicyBuildsLinux `pulumi:"linux"`
	// Builds for the Linux platform (arm64).
	LinuxArm64 GetSensorUpdatePolicyBuildsLinuxArm64 `pulumi:"linuxArm64"`
	// Builds for the Mac platform.
	Mac GetSensorUpdatePolicyBuildsMac `pulumi:"mac"`
	// Builds for the Windows platform.
	Windows GetSensorUpdatePolicyBuildsWindows `pulumi:"windows"`
}

A collection of values returned by getSensorUpdatePolicyBuilds.

func GetSensorUpdatePolicyBuilds

func GetSensorUpdatePolicyBuilds(ctx *pulumi.Context, opts ...pulumi.InvokeOption) (*GetSensorUpdatePolicyBuildsResult, error)

This data source provides information about the latest sensor builds for each platform.

## API Scopes

The following API scopes are required:

- Sensor update policies | Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		builds, err := crowdstrike.GetSensorUpdatePolicyBuilds(ctx, map[string]interface{}{}, nil)
		if err != nil {
			return err
		}
		ctx.Export("latestWindowsBuild", builds.Windows.Latest)
		ctx.Export("n1LinuxBuild", builds.Linux.N1)
		ctx.Export("n2MacBuild", builds.Mac.N2)
		ctx.Export("latestLinuxArm64Build", builds.LinuxArm64.Latest)
		return nil
	})
}

```

type GetSensorUpdatePolicyBuildsResultOutput

type GetSensorUpdatePolicyBuildsResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getSensorUpdatePolicyBuilds.

func (GetSensorUpdatePolicyBuildsResultOutput) ElementType

func (GetSensorUpdatePolicyBuildsResultOutput) Id

Placeholder identifier.

func (GetSensorUpdatePolicyBuildsResultOutput) Linux

Builds for the Linux platform.

func (GetSensorUpdatePolicyBuildsResultOutput) LinuxArm64

Builds for the Linux platform (arm64).

func (GetSensorUpdatePolicyBuildsResultOutput) Mac

Builds for the Mac platform.

func (GetSensorUpdatePolicyBuildsResultOutput) ToGetSensorUpdatePolicyBuildsResultOutput

func (o GetSensorUpdatePolicyBuildsResultOutput) ToGetSensorUpdatePolicyBuildsResultOutput() GetSensorUpdatePolicyBuildsResultOutput

func (GetSensorUpdatePolicyBuildsResultOutput) ToGetSensorUpdatePolicyBuildsResultOutputWithContext

func (o GetSensorUpdatePolicyBuildsResultOutput) ToGetSensorUpdatePolicyBuildsResultOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsResultOutput

func (GetSensorUpdatePolicyBuildsResultOutput) Windows

Builds for the Windows platform.

type GetSensorUpdatePolicyBuildsWindows

type GetSensorUpdatePolicyBuildsWindows struct {
	// All sensor builds for the specific platform.
	Alls []GetSensorUpdatePolicyBuildsWindowsAll `pulumi:"alls"`
	// The latest sensor build.
	Latest GetSensorUpdatePolicyBuildsWindowsLatest `pulumi:"latest"`
	// The n-1 sensor build.
	N1 GetSensorUpdatePolicyBuildsWindowsN1 `pulumi:"n1"`
	// The n-2 sensor build.
	N2 GetSensorUpdatePolicyBuildsWindowsN2 `pulumi:"n2"`
}

type GetSensorUpdatePolicyBuildsWindowsAll

type GetSensorUpdatePolicyBuildsWindowsAll struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsWindowsAllArgs

type GetSensorUpdatePolicyBuildsWindowsAllArgs struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsWindowsAllArgs) ElementType

func (GetSensorUpdatePolicyBuildsWindowsAllArgs) ToGetSensorUpdatePolicyBuildsWindowsAllOutput

func (i GetSensorUpdatePolicyBuildsWindowsAllArgs) ToGetSensorUpdatePolicyBuildsWindowsAllOutput() GetSensorUpdatePolicyBuildsWindowsAllOutput

func (GetSensorUpdatePolicyBuildsWindowsAllArgs) ToGetSensorUpdatePolicyBuildsWindowsAllOutputWithContext

func (i GetSensorUpdatePolicyBuildsWindowsAllArgs) ToGetSensorUpdatePolicyBuildsWindowsAllOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsAllOutput

type GetSensorUpdatePolicyBuildsWindowsAllArray

type GetSensorUpdatePolicyBuildsWindowsAllArray []GetSensorUpdatePolicyBuildsWindowsAllInput

func (GetSensorUpdatePolicyBuildsWindowsAllArray) ElementType

func (GetSensorUpdatePolicyBuildsWindowsAllArray) ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutput

func (i GetSensorUpdatePolicyBuildsWindowsAllArray) ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutput() GetSensorUpdatePolicyBuildsWindowsAllArrayOutput

func (GetSensorUpdatePolicyBuildsWindowsAllArray) ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutputWithContext

func (i GetSensorUpdatePolicyBuildsWindowsAllArray) ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsAllArrayOutput

type GetSensorUpdatePolicyBuildsWindowsAllArrayInput

type GetSensorUpdatePolicyBuildsWindowsAllArrayInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutput() GetSensorUpdatePolicyBuildsWindowsAllArrayOutput
	ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsWindowsAllArrayOutput
}

GetSensorUpdatePolicyBuildsWindowsAllArrayInput is an input type that accepts GetSensorUpdatePolicyBuildsWindowsAllArray and GetSensorUpdatePolicyBuildsWindowsAllArrayOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsWindowsAllArrayInput` via:

GetSensorUpdatePolicyBuildsWindowsAllArray{ GetSensorUpdatePolicyBuildsWindowsAllArgs{...} }

type GetSensorUpdatePolicyBuildsWindowsAllArrayOutput

type GetSensorUpdatePolicyBuildsWindowsAllArrayOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsWindowsAllArrayOutput) ElementType

func (GetSensorUpdatePolicyBuildsWindowsAllArrayOutput) Index

func (GetSensorUpdatePolicyBuildsWindowsAllArrayOutput) ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutput

func (o GetSensorUpdatePolicyBuildsWindowsAllArrayOutput) ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutput() GetSensorUpdatePolicyBuildsWindowsAllArrayOutput

func (GetSensorUpdatePolicyBuildsWindowsAllArrayOutput) ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutputWithContext

func (o GetSensorUpdatePolicyBuildsWindowsAllArrayOutput) ToGetSensorUpdatePolicyBuildsWindowsAllArrayOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsAllArrayOutput

type GetSensorUpdatePolicyBuildsWindowsAllInput

type GetSensorUpdatePolicyBuildsWindowsAllInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsWindowsAllOutput() GetSensorUpdatePolicyBuildsWindowsAllOutput
	ToGetSensorUpdatePolicyBuildsWindowsAllOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsWindowsAllOutput
}

GetSensorUpdatePolicyBuildsWindowsAllInput is an input type that accepts GetSensorUpdatePolicyBuildsWindowsAllArgs and GetSensorUpdatePolicyBuildsWindowsAllOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsWindowsAllInput` via:

GetSensorUpdatePolicyBuildsWindowsAllArgs{...}

type GetSensorUpdatePolicyBuildsWindowsAllOutput

type GetSensorUpdatePolicyBuildsWindowsAllOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsWindowsAllOutput) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsWindowsAllOutput) ElementType

func (GetSensorUpdatePolicyBuildsWindowsAllOutput) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsWindowsAllOutput) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsWindowsAllOutput) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsWindowsAllOutput) ToGetSensorUpdatePolicyBuildsWindowsAllOutput

func (o GetSensorUpdatePolicyBuildsWindowsAllOutput) ToGetSensorUpdatePolicyBuildsWindowsAllOutput() GetSensorUpdatePolicyBuildsWindowsAllOutput

func (GetSensorUpdatePolicyBuildsWindowsAllOutput) ToGetSensorUpdatePolicyBuildsWindowsAllOutputWithContext

func (o GetSensorUpdatePolicyBuildsWindowsAllOutput) ToGetSensorUpdatePolicyBuildsWindowsAllOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsAllOutput

type GetSensorUpdatePolicyBuildsWindowsArgs

type GetSensorUpdatePolicyBuildsWindowsArgs struct {
	// All sensor builds for the specific platform.
	Alls GetSensorUpdatePolicyBuildsWindowsAllArrayInput `pulumi:"alls"`
	// The latest sensor build.
	Latest GetSensorUpdatePolicyBuildsWindowsLatestInput `pulumi:"latest"`
	// The n-1 sensor build.
	N1 GetSensorUpdatePolicyBuildsWindowsN1Input `pulumi:"n1"`
	// The n-2 sensor build.
	N2 GetSensorUpdatePolicyBuildsWindowsN2Input `pulumi:"n2"`
}

func (GetSensorUpdatePolicyBuildsWindowsArgs) ElementType

func (GetSensorUpdatePolicyBuildsWindowsArgs) ToGetSensorUpdatePolicyBuildsWindowsOutput

func (i GetSensorUpdatePolicyBuildsWindowsArgs) ToGetSensorUpdatePolicyBuildsWindowsOutput() GetSensorUpdatePolicyBuildsWindowsOutput

func (GetSensorUpdatePolicyBuildsWindowsArgs) ToGetSensorUpdatePolicyBuildsWindowsOutputWithContext

func (i GetSensorUpdatePolicyBuildsWindowsArgs) ToGetSensorUpdatePolicyBuildsWindowsOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsOutput

type GetSensorUpdatePolicyBuildsWindowsInput

type GetSensorUpdatePolicyBuildsWindowsInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsWindowsOutput() GetSensorUpdatePolicyBuildsWindowsOutput
	ToGetSensorUpdatePolicyBuildsWindowsOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsWindowsOutput
}

GetSensorUpdatePolicyBuildsWindowsInput is an input type that accepts GetSensorUpdatePolicyBuildsWindowsArgs and GetSensorUpdatePolicyBuildsWindowsOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsWindowsInput` via:

GetSensorUpdatePolicyBuildsWindowsArgs{...}

type GetSensorUpdatePolicyBuildsWindowsLatest

type GetSensorUpdatePolicyBuildsWindowsLatest struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsWindowsLatestArgs

type GetSensorUpdatePolicyBuildsWindowsLatestArgs struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsWindowsLatestArgs) ElementType

func (GetSensorUpdatePolicyBuildsWindowsLatestArgs) ToGetSensorUpdatePolicyBuildsWindowsLatestOutput

func (i GetSensorUpdatePolicyBuildsWindowsLatestArgs) ToGetSensorUpdatePolicyBuildsWindowsLatestOutput() GetSensorUpdatePolicyBuildsWindowsLatestOutput

func (GetSensorUpdatePolicyBuildsWindowsLatestArgs) ToGetSensorUpdatePolicyBuildsWindowsLatestOutputWithContext

func (i GetSensorUpdatePolicyBuildsWindowsLatestArgs) ToGetSensorUpdatePolicyBuildsWindowsLatestOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsLatestOutput

type GetSensorUpdatePolicyBuildsWindowsLatestInput

type GetSensorUpdatePolicyBuildsWindowsLatestInput interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsWindowsLatestOutput() GetSensorUpdatePolicyBuildsWindowsLatestOutput
	ToGetSensorUpdatePolicyBuildsWindowsLatestOutputWithContext(context.Context) GetSensorUpdatePolicyBuildsWindowsLatestOutput
}

GetSensorUpdatePolicyBuildsWindowsLatestInput is an input type that accepts GetSensorUpdatePolicyBuildsWindowsLatestArgs and GetSensorUpdatePolicyBuildsWindowsLatestOutput values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsWindowsLatestInput` via:

GetSensorUpdatePolicyBuildsWindowsLatestArgs{...}

type GetSensorUpdatePolicyBuildsWindowsLatestOutput

type GetSensorUpdatePolicyBuildsWindowsLatestOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsWindowsLatestOutput) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsWindowsLatestOutput) ElementType

func (GetSensorUpdatePolicyBuildsWindowsLatestOutput) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsWindowsLatestOutput) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsWindowsLatestOutput) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsWindowsLatestOutput) ToGetSensorUpdatePolicyBuildsWindowsLatestOutput

func (o GetSensorUpdatePolicyBuildsWindowsLatestOutput) ToGetSensorUpdatePolicyBuildsWindowsLatestOutput() GetSensorUpdatePolicyBuildsWindowsLatestOutput

func (GetSensorUpdatePolicyBuildsWindowsLatestOutput) ToGetSensorUpdatePolicyBuildsWindowsLatestOutputWithContext

func (o GetSensorUpdatePolicyBuildsWindowsLatestOutput) ToGetSensorUpdatePolicyBuildsWindowsLatestOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsLatestOutput

type GetSensorUpdatePolicyBuildsWindowsN1

type GetSensorUpdatePolicyBuildsWindowsN1 struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsWindowsN1Args

type GetSensorUpdatePolicyBuildsWindowsN1Args struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsWindowsN1Args) ElementType

func (GetSensorUpdatePolicyBuildsWindowsN1Args) ToGetSensorUpdatePolicyBuildsWindowsN1Output

func (i GetSensorUpdatePolicyBuildsWindowsN1Args) ToGetSensorUpdatePolicyBuildsWindowsN1Output() GetSensorUpdatePolicyBuildsWindowsN1Output

func (GetSensorUpdatePolicyBuildsWindowsN1Args) ToGetSensorUpdatePolicyBuildsWindowsN1OutputWithContext

func (i GetSensorUpdatePolicyBuildsWindowsN1Args) ToGetSensorUpdatePolicyBuildsWindowsN1OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsN1Output

type GetSensorUpdatePolicyBuildsWindowsN1Input

type GetSensorUpdatePolicyBuildsWindowsN1Input interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsWindowsN1Output() GetSensorUpdatePolicyBuildsWindowsN1Output
	ToGetSensorUpdatePolicyBuildsWindowsN1OutputWithContext(context.Context) GetSensorUpdatePolicyBuildsWindowsN1Output
}

GetSensorUpdatePolicyBuildsWindowsN1Input is an input type that accepts GetSensorUpdatePolicyBuildsWindowsN1Args and GetSensorUpdatePolicyBuildsWindowsN1Output values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsWindowsN1Input` via:

GetSensorUpdatePolicyBuildsWindowsN1Args{...}

type GetSensorUpdatePolicyBuildsWindowsN1Output

type GetSensorUpdatePolicyBuildsWindowsN1Output struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsWindowsN1Output) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsWindowsN1Output) ElementType

func (GetSensorUpdatePolicyBuildsWindowsN1Output) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsWindowsN1Output) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsWindowsN1Output) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsWindowsN1Output) ToGetSensorUpdatePolicyBuildsWindowsN1Output

func (o GetSensorUpdatePolicyBuildsWindowsN1Output) ToGetSensorUpdatePolicyBuildsWindowsN1Output() GetSensorUpdatePolicyBuildsWindowsN1Output

func (GetSensorUpdatePolicyBuildsWindowsN1Output) ToGetSensorUpdatePolicyBuildsWindowsN1OutputWithContext

func (o GetSensorUpdatePolicyBuildsWindowsN1Output) ToGetSensorUpdatePolicyBuildsWindowsN1OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsN1Output

type GetSensorUpdatePolicyBuildsWindowsN2

type GetSensorUpdatePolicyBuildsWindowsN2 struct {
	// The build number for a specific sensor version.
	Build string `pulumi:"build"`
	// The target platform for a the build.
	Platform string `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion string `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage string `pulumi:"stage"`
}

type GetSensorUpdatePolicyBuildsWindowsN2Args

type GetSensorUpdatePolicyBuildsWindowsN2Args struct {
	// The build number for a specific sensor version.
	Build pulumi.StringInput `pulumi:"build"`
	// The target platform for a the build.
	Platform pulumi.StringInput `pulumi:"platform"`
	// CrowdStrike Falcon Sensor version.
	SensorVersion pulumi.StringInput `pulumi:"sensorVersion"`
	// The stage for the build.
	Stage pulumi.StringInput `pulumi:"stage"`
}

func (GetSensorUpdatePolicyBuildsWindowsN2Args) ElementType

func (GetSensorUpdatePolicyBuildsWindowsN2Args) ToGetSensorUpdatePolicyBuildsWindowsN2Output

func (i GetSensorUpdatePolicyBuildsWindowsN2Args) ToGetSensorUpdatePolicyBuildsWindowsN2Output() GetSensorUpdatePolicyBuildsWindowsN2Output

func (GetSensorUpdatePolicyBuildsWindowsN2Args) ToGetSensorUpdatePolicyBuildsWindowsN2OutputWithContext

func (i GetSensorUpdatePolicyBuildsWindowsN2Args) ToGetSensorUpdatePolicyBuildsWindowsN2OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsN2Output

type GetSensorUpdatePolicyBuildsWindowsN2Input

type GetSensorUpdatePolicyBuildsWindowsN2Input interface {
	pulumi.Input

	ToGetSensorUpdatePolicyBuildsWindowsN2Output() GetSensorUpdatePolicyBuildsWindowsN2Output
	ToGetSensorUpdatePolicyBuildsWindowsN2OutputWithContext(context.Context) GetSensorUpdatePolicyBuildsWindowsN2Output
}

GetSensorUpdatePolicyBuildsWindowsN2Input is an input type that accepts GetSensorUpdatePolicyBuildsWindowsN2Args and GetSensorUpdatePolicyBuildsWindowsN2Output values. You can construct a concrete instance of `GetSensorUpdatePolicyBuildsWindowsN2Input` via:

GetSensorUpdatePolicyBuildsWindowsN2Args{...}

type GetSensorUpdatePolicyBuildsWindowsN2Output

type GetSensorUpdatePolicyBuildsWindowsN2Output struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsWindowsN2Output) Build

The build number for a specific sensor version.

func (GetSensorUpdatePolicyBuildsWindowsN2Output) ElementType

func (GetSensorUpdatePolicyBuildsWindowsN2Output) Platform

The target platform for a the build.

func (GetSensorUpdatePolicyBuildsWindowsN2Output) SensorVersion

CrowdStrike Falcon Sensor version.

func (GetSensorUpdatePolicyBuildsWindowsN2Output) Stage

The stage for the build.

func (GetSensorUpdatePolicyBuildsWindowsN2Output) ToGetSensorUpdatePolicyBuildsWindowsN2Output

func (o GetSensorUpdatePolicyBuildsWindowsN2Output) ToGetSensorUpdatePolicyBuildsWindowsN2Output() GetSensorUpdatePolicyBuildsWindowsN2Output

func (GetSensorUpdatePolicyBuildsWindowsN2Output) ToGetSensorUpdatePolicyBuildsWindowsN2OutputWithContext

func (o GetSensorUpdatePolicyBuildsWindowsN2Output) ToGetSensorUpdatePolicyBuildsWindowsN2OutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsN2Output

type GetSensorUpdatePolicyBuildsWindowsOutput

type GetSensorUpdatePolicyBuildsWindowsOutput struct{ *pulumi.OutputState }

func (GetSensorUpdatePolicyBuildsWindowsOutput) Alls

All sensor builds for the specific platform.

func (GetSensorUpdatePolicyBuildsWindowsOutput) ElementType

func (GetSensorUpdatePolicyBuildsWindowsOutput) Latest

The latest sensor build.

func (GetSensorUpdatePolicyBuildsWindowsOutput) N1

The n-1 sensor build.

func (GetSensorUpdatePolicyBuildsWindowsOutput) N2

The n-2 sensor build.

func (GetSensorUpdatePolicyBuildsWindowsOutput) ToGetSensorUpdatePolicyBuildsWindowsOutput

func (o GetSensorUpdatePolicyBuildsWindowsOutput) ToGetSensorUpdatePolicyBuildsWindowsOutput() GetSensorUpdatePolicyBuildsWindowsOutput

func (GetSensorUpdatePolicyBuildsWindowsOutput) ToGetSensorUpdatePolicyBuildsWindowsOutputWithContext

func (o GetSensorUpdatePolicyBuildsWindowsOutput) ToGetSensorUpdatePolicyBuildsWindowsOutputWithContext(ctx context.Context) GetSensorUpdatePolicyBuildsWindowsOutput

type HostGroup

type HostGroup struct {
	pulumi.CustomResourceState

	// The assignment rule for dynamic host groups.
	AssignmentRule pulumi.StringPtrOutput `pulumi:"assignmentRule"`
	// Description of the host group.
	Description pulumi.StringOutput `pulumi:"description"`
	// List of host ids to add to a staticByID host group.
	HostIds pulumi.StringArrayOutput `pulumi:"hostIds"`
	// List of hostnames to add to a static host group.
	Hostnames   pulumi.StringArrayOutput `pulumi:"hostnames"`
	LastUpdated pulumi.StringOutput      `pulumi:"lastUpdated"`
	// Name of the host group.
	Name pulumi.StringOutput `pulumi:"name"`
	// The host group type, case sensitive. (dynamic, static, staticByID)
	Type pulumi.StringOutput `pulumi:"type"`
}

This resource allows you to manage host groups in the CrowdStrike Falcon Platform.

## API Scopes

The following API scopes are required:

- Host groups | Read & Write - Firewall management | Read & Write - Prevention policies | Read & Write - Response policies | Read & Write - Sensor update policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		dynamic, err := crowdstrike.NewHostGroup(ctx, "dynamic", &crowdstrike.HostGroupArgs{
			AssignmentRule: pulumi.String("tags:'SensorGroupingTags/molecule'+os_version:'Debian GNU 11'"),
			Description:    pulumi.String("Made with Pulumi"),
			Type:           pulumi.String("dynamic"),
		})
		if err != nil {
			return err
		}
		_, err = crowdstrike.NewHostGroup(ctx, "static", &crowdstrike.HostGroupArgs{
			Description: pulumi.String("Made with Pulumi"),
			Type:        pulumi.String("staticByID"),
			HostIds: pulumi.StringArray{
				pulumi.String("host1"),
				pulumi.String("host2"),
			},
		})
		if err != nil {
			return err
		}
		_, err = crowdstrike.NewHostGroup(ctx, "staticByID", &crowdstrike.HostGroupArgs{
			Description: pulumi.String("Made with Pulumi"),
			Type:        pulumi.String("staticByID"),
			HostIds: pulumi.StringArray{
				pulumi.String("123123"),
				pulumi.String("124124"),
			},
		})
		if err != nil {
			return err
		}
		ctx.Export("hostGroup", dynamic)
		return nil
	})
}

```

## Import

host group can be imported by specifying the policy id.

```sh $ pulumi import crowdstrike:index/hostGroup:HostGroup example 7fb858a949034a0cbca175f660f1e769 ```

func GetHostGroup

func GetHostGroup(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *HostGroupState, opts ...pulumi.ResourceOption) (*HostGroup, error)

GetHostGroup gets an existing HostGroup resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewHostGroup

func NewHostGroup(ctx *pulumi.Context,
	name string, args *HostGroupArgs, opts ...pulumi.ResourceOption) (*HostGroup, error)

NewHostGroup registers a new resource with the given unique name, arguments, and options.

func (*HostGroup) ElementType

func (*HostGroup) ElementType() reflect.Type

func (*HostGroup) ToHostGroupOutput

func (i *HostGroup) ToHostGroupOutput() HostGroupOutput

func (*HostGroup) ToHostGroupOutputWithContext

func (i *HostGroup) ToHostGroupOutputWithContext(ctx context.Context) HostGroupOutput

type HostGroupArgs

type HostGroupArgs struct {
	// The assignment rule for dynamic host groups.
	AssignmentRule pulumi.StringPtrInput
	// Description of the host group.
	Description pulumi.StringInput
	// List of host ids to add to a staticByID host group.
	HostIds pulumi.StringArrayInput
	// List of hostnames to add to a static host group.
	Hostnames pulumi.StringArrayInput
	// Name of the host group.
	Name pulumi.StringPtrInput
	// The host group type, case sensitive. (dynamic, static, staticByID)
	Type pulumi.StringInput
}

The set of arguments for constructing a HostGroup resource.

func (HostGroupArgs) ElementType

func (HostGroupArgs) ElementType() reflect.Type

type HostGroupArray

type HostGroupArray []HostGroupInput

func (HostGroupArray) ElementType

func (HostGroupArray) ElementType() reflect.Type

func (HostGroupArray) ToHostGroupArrayOutput

func (i HostGroupArray) ToHostGroupArrayOutput() HostGroupArrayOutput

func (HostGroupArray) ToHostGroupArrayOutputWithContext

func (i HostGroupArray) ToHostGroupArrayOutputWithContext(ctx context.Context) HostGroupArrayOutput

type HostGroupArrayInput

type HostGroupArrayInput interface {
	pulumi.Input

	ToHostGroupArrayOutput() HostGroupArrayOutput
	ToHostGroupArrayOutputWithContext(context.Context) HostGroupArrayOutput
}

HostGroupArrayInput is an input type that accepts HostGroupArray and HostGroupArrayOutput values. You can construct a concrete instance of `HostGroupArrayInput` via:

HostGroupArray{ HostGroupArgs{...} }

type HostGroupArrayOutput

type HostGroupArrayOutput struct{ *pulumi.OutputState }

func (HostGroupArrayOutput) ElementType

func (HostGroupArrayOutput) ElementType() reflect.Type

func (HostGroupArrayOutput) Index

func (HostGroupArrayOutput) ToHostGroupArrayOutput

func (o HostGroupArrayOutput) ToHostGroupArrayOutput() HostGroupArrayOutput

func (HostGroupArrayOutput) ToHostGroupArrayOutputWithContext

func (o HostGroupArrayOutput) ToHostGroupArrayOutputWithContext(ctx context.Context) HostGroupArrayOutput

type HostGroupInput

type HostGroupInput interface {
	pulumi.Input

	ToHostGroupOutput() HostGroupOutput
	ToHostGroupOutputWithContext(ctx context.Context) HostGroupOutput
}

type HostGroupMap

type HostGroupMap map[string]HostGroupInput

func (HostGroupMap) ElementType

func (HostGroupMap) ElementType() reflect.Type

func (HostGroupMap) ToHostGroupMapOutput

func (i HostGroupMap) ToHostGroupMapOutput() HostGroupMapOutput

func (HostGroupMap) ToHostGroupMapOutputWithContext

func (i HostGroupMap) ToHostGroupMapOutputWithContext(ctx context.Context) HostGroupMapOutput

type HostGroupMapInput

type HostGroupMapInput interface {
	pulumi.Input

	ToHostGroupMapOutput() HostGroupMapOutput
	ToHostGroupMapOutputWithContext(context.Context) HostGroupMapOutput
}

HostGroupMapInput is an input type that accepts HostGroupMap and HostGroupMapOutput values. You can construct a concrete instance of `HostGroupMapInput` via:

HostGroupMap{ "key": HostGroupArgs{...} }

type HostGroupMapOutput

type HostGroupMapOutput struct{ *pulumi.OutputState }

func (HostGroupMapOutput) ElementType

func (HostGroupMapOutput) ElementType() reflect.Type

func (HostGroupMapOutput) MapIndex

func (HostGroupMapOutput) ToHostGroupMapOutput

func (o HostGroupMapOutput) ToHostGroupMapOutput() HostGroupMapOutput

func (HostGroupMapOutput) ToHostGroupMapOutputWithContext

func (o HostGroupMapOutput) ToHostGroupMapOutputWithContext(ctx context.Context) HostGroupMapOutput

type HostGroupOutput

type HostGroupOutput struct{ *pulumi.OutputState }

func (HostGroupOutput) AssignmentRule

func (o HostGroupOutput) AssignmentRule() pulumi.StringPtrOutput

The assignment rule for dynamic host groups.

func (HostGroupOutput) Description

func (o HostGroupOutput) Description() pulumi.StringOutput

Description of the host group.

func (HostGroupOutput) ElementType

func (HostGroupOutput) ElementType() reflect.Type

func (HostGroupOutput) HostIds

List of host ids to add to a staticByID host group.

func (HostGroupOutput) Hostnames

List of hostnames to add to a static host group.

func (HostGroupOutput) LastUpdated

func (o HostGroupOutput) LastUpdated() pulumi.StringOutput

func (HostGroupOutput) Name

Name of the host group.

func (HostGroupOutput) ToHostGroupOutput

func (o HostGroupOutput) ToHostGroupOutput() HostGroupOutput

func (HostGroupOutput) ToHostGroupOutputWithContext

func (o HostGroupOutput) ToHostGroupOutputWithContext(ctx context.Context) HostGroupOutput

func (HostGroupOutput) Type

The host group type, case sensitive. (dynamic, static, staticByID)

type HostGroupState

type HostGroupState struct {
	// The assignment rule for dynamic host groups.
	AssignmentRule pulumi.StringPtrInput
	// Description of the host group.
	Description pulumi.StringPtrInput
	// List of host ids to add to a staticByID host group.
	HostIds pulumi.StringArrayInput
	// List of hostnames to add to a static host group.
	Hostnames   pulumi.StringArrayInput
	LastUpdated pulumi.StringPtrInput
	// Name of the host group.
	Name pulumi.StringPtrInput
	// The host group type, case sensitive. (dynamic, static, staticByID)
	Type pulumi.StringPtrInput
}

func (HostGroupState) ElementType

func (HostGroupState) ElementType() reflect.Type

type LookupCloudAwsAccountArgs

type LookupCloudAwsAccountArgs struct {
	// Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organizationId filter for OR matching
	AccountId *string `pulumi:"accountId"`
	// Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with accountId filter for OR matching
	OrganizationId *string `pulumi:"organizationId"`
}

A collection of arguments for invoking getCloudAwsAccount.

type LookupCloudAwsAccountOutputArgs

type LookupCloudAwsAccountOutputArgs struct {
	// Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organizationId filter for OR matching
	AccountId pulumi.StringPtrInput `pulumi:"accountId"`
	// Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with accountId filter for OR matching
	OrganizationId pulumi.StringPtrInput `pulumi:"organizationId"`
}

A collection of arguments for invoking getCloudAwsAccount.

func (LookupCloudAwsAccountOutputArgs) ElementType

type LookupCloudAwsAccountResult

type LookupCloudAwsAccountResult struct {
	// Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organizationId filter for OR matching
	AccountId *string `pulumi:"accountId"`
	// The list of AWS accounts
	Accounts []GetCloudAwsAccountAccount `pulumi:"accounts"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with accountId filter for OR matching
	OrganizationId *string `pulumi:"organizationId"`
}

A collection of values returned by getCloudAwsAccount.

func LookupCloudAwsAccount

func LookupCloudAwsAccount(ctx *pulumi.Context, args *LookupCloudAwsAccountArgs, opts ...pulumi.InvokeOption) (*LookupCloudAwsAccountResult, error)

This data source provides information about AWS accounts in Falcon.

## API Scopes

The following API scopes are required:

- Cloud security AWS registration | Read & Write - CSPM registration | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := crowdstrike.LookupCloudAwsAccount(ctx, &crowdstrike.LookupCloudAwsAccountArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = crowdstrike.LookupCloudAwsAccount(ctx, &crowdstrike.LookupCloudAwsAccountArgs{
			AccountId: pulumi.StringRef("123456789012"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = crowdstrike.LookupCloudAwsAccount(ctx, &crowdstrike.LookupCloudAwsAccountArgs{
			OrganizationId: pulumi.StringRef("o-123456789012"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupCloudAwsAccountResultOutput

type LookupCloudAwsAccountResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getCloudAwsAccount.

func (LookupCloudAwsAccountResultOutput) AccountId

Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organizationId filter for OR matching

func (LookupCloudAwsAccountResultOutput) Accounts

The list of AWS accounts

func (LookupCloudAwsAccountResultOutput) ElementType

func (LookupCloudAwsAccountResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupCloudAwsAccountResultOutput) OrganizationId

Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with accountId filter for OR matching

func (LookupCloudAwsAccountResultOutput) ToLookupCloudAwsAccountResultOutput

func (o LookupCloudAwsAccountResultOutput) ToLookupCloudAwsAccountResultOutput() LookupCloudAwsAccountResultOutput

func (LookupCloudAwsAccountResultOutput) ToLookupCloudAwsAccountResultOutputWithContext

func (o LookupCloudAwsAccountResultOutput) ToLookupCloudAwsAccountResultOutputWithContext(ctx context.Context) LookupCloudAwsAccountResultOutput

type PreventionPolicyAttachment

type PreventionPolicyAttachment struct {
	pulumi.CustomResourceState

	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayOutput `pulumi:"hostGroups"`
	// The prevention policy id you want to attach to.
	IdProperty pulumi.StringOutput `pulumi:"idProperty"`
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayOutput `pulumi:"ioaRuleGroups"`
	LastUpdated   pulumi.StringOutput      `pulumi:"lastUpdated"`
}

This resource allows managing the host groups and ioa rule groups attached to a prevention policy. This resource takes exclusive ownership over the host groups and ioa rule groups assigned to a prevention policy. If you want to fully create or manage a prevention policy please use the `prevention_policy_*` resource for the platform you want to manage.

## API Scopes

The following API scopes are required:

- Prevention policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := crowdstrike.NewPreventionPolicyAttachment(ctx, "example", &crowdstrike.PreventionPolicyAttachmentArgs{
			IdProperty: pulumi.String("16c0eecfeebb47ce95185fda2e5b3112"),
			HostGroups: pulumi.StringArray{
				pulumi.String("df868c936cd443e5a95b2603e2483602"),
			},
			IoaRuleGroups: pulumi.StringArray{
				pulumi.String("507117bc669d41bb93d0a009f557bb23"),
			},
		})
		if err != nil {
			return err
		}
		ctx.Export("preventionPolicyAttachment", example)
		return nil
	})
}

```

## Import

Prevention Policy Attachment can be imported by specifying the id.

```sh $ pulumi import crowdstrike:index/preventionPolicyAttachment:PreventionPolicyAttachment example 7fb858a949034a0cbca175f660f1e769 ```

func GetPreventionPolicyAttachment

func GetPreventionPolicyAttachment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PreventionPolicyAttachmentState, opts ...pulumi.ResourceOption) (*PreventionPolicyAttachment, error)

GetPreventionPolicyAttachment gets an existing PreventionPolicyAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPreventionPolicyAttachment

func NewPreventionPolicyAttachment(ctx *pulumi.Context,
	name string, args *PreventionPolicyAttachmentArgs, opts ...pulumi.ResourceOption) (*PreventionPolicyAttachment, error)

NewPreventionPolicyAttachment registers a new resource with the given unique name, arguments, and options.

func (*PreventionPolicyAttachment) ElementType

func (*PreventionPolicyAttachment) ElementType() reflect.Type

func (*PreventionPolicyAttachment) ToPreventionPolicyAttachmentOutput

func (i *PreventionPolicyAttachment) ToPreventionPolicyAttachmentOutput() PreventionPolicyAttachmentOutput

func (*PreventionPolicyAttachment) ToPreventionPolicyAttachmentOutputWithContext

func (i *PreventionPolicyAttachment) ToPreventionPolicyAttachmentOutputWithContext(ctx context.Context) PreventionPolicyAttachmentOutput

type PreventionPolicyAttachmentArgs

type PreventionPolicyAttachmentArgs struct {
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayInput
	// The prevention policy id you want to attach to.
	IdProperty pulumi.StringInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
}

The set of arguments for constructing a PreventionPolicyAttachment resource.

func (PreventionPolicyAttachmentArgs) ElementType

type PreventionPolicyAttachmentArray

type PreventionPolicyAttachmentArray []PreventionPolicyAttachmentInput

func (PreventionPolicyAttachmentArray) ElementType

func (PreventionPolicyAttachmentArray) ToPreventionPolicyAttachmentArrayOutput

func (i PreventionPolicyAttachmentArray) ToPreventionPolicyAttachmentArrayOutput() PreventionPolicyAttachmentArrayOutput

func (PreventionPolicyAttachmentArray) ToPreventionPolicyAttachmentArrayOutputWithContext

func (i PreventionPolicyAttachmentArray) ToPreventionPolicyAttachmentArrayOutputWithContext(ctx context.Context) PreventionPolicyAttachmentArrayOutput

type PreventionPolicyAttachmentArrayInput

type PreventionPolicyAttachmentArrayInput interface {
	pulumi.Input

	ToPreventionPolicyAttachmentArrayOutput() PreventionPolicyAttachmentArrayOutput
	ToPreventionPolicyAttachmentArrayOutputWithContext(context.Context) PreventionPolicyAttachmentArrayOutput
}

PreventionPolicyAttachmentArrayInput is an input type that accepts PreventionPolicyAttachmentArray and PreventionPolicyAttachmentArrayOutput values. You can construct a concrete instance of `PreventionPolicyAttachmentArrayInput` via:

PreventionPolicyAttachmentArray{ PreventionPolicyAttachmentArgs{...} }

type PreventionPolicyAttachmentArrayOutput

type PreventionPolicyAttachmentArrayOutput struct{ *pulumi.OutputState }

func (PreventionPolicyAttachmentArrayOutput) ElementType

func (PreventionPolicyAttachmentArrayOutput) Index

func (PreventionPolicyAttachmentArrayOutput) ToPreventionPolicyAttachmentArrayOutput

func (o PreventionPolicyAttachmentArrayOutput) ToPreventionPolicyAttachmentArrayOutput() PreventionPolicyAttachmentArrayOutput

func (PreventionPolicyAttachmentArrayOutput) ToPreventionPolicyAttachmentArrayOutputWithContext

func (o PreventionPolicyAttachmentArrayOutput) ToPreventionPolicyAttachmentArrayOutputWithContext(ctx context.Context) PreventionPolicyAttachmentArrayOutput

type PreventionPolicyAttachmentInput

type PreventionPolicyAttachmentInput interface {
	pulumi.Input

	ToPreventionPolicyAttachmentOutput() PreventionPolicyAttachmentOutput
	ToPreventionPolicyAttachmentOutputWithContext(ctx context.Context) PreventionPolicyAttachmentOutput
}

type PreventionPolicyAttachmentMap

type PreventionPolicyAttachmentMap map[string]PreventionPolicyAttachmentInput

func (PreventionPolicyAttachmentMap) ElementType

func (PreventionPolicyAttachmentMap) ToPreventionPolicyAttachmentMapOutput

func (i PreventionPolicyAttachmentMap) ToPreventionPolicyAttachmentMapOutput() PreventionPolicyAttachmentMapOutput

func (PreventionPolicyAttachmentMap) ToPreventionPolicyAttachmentMapOutputWithContext

func (i PreventionPolicyAttachmentMap) ToPreventionPolicyAttachmentMapOutputWithContext(ctx context.Context) PreventionPolicyAttachmentMapOutput

type PreventionPolicyAttachmentMapInput

type PreventionPolicyAttachmentMapInput interface {
	pulumi.Input

	ToPreventionPolicyAttachmentMapOutput() PreventionPolicyAttachmentMapOutput
	ToPreventionPolicyAttachmentMapOutputWithContext(context.Context) PreventionPolicyAttachmentMapOutput
}

PreventionPolicyAttachmentMapInput is an input type that accepts PreventionPolicyAttachmentMap and PreventionPolicyAttachmentMapOutput values. You can construct a concrete instance of `PreventionPolicyAttachmentMapInput` via:

PreventionPolicyAttachmentMap{ "key": PreventionPolicyAttachmentArgs{...} }

type PreventionPolicyAttachmentMapOutput

type PreventionPolicyAttachmentMapOutput struct{ *pulumi.OutputState }

func (PreventionPolicyAttachmentMapOutput) ElementType

func (PreventionPolicyAttachmentMapOutput) MapIndex

func (PreventionPolicyAttachmentMapOutput) ToPreventionPolicyAttachmentMapOutput

func (o PreventionPolicyAttachmentMapOutput) ToPreventionPolicyAttachmentMapOutput() PreventionPolicyAttachmentMapOutput

func (PreventionPolicyAttachmentMapOutput) ToPreventionPolicyAttachmentMapOutputWithContext

func (o PreventionPolicyAttachmentMapOutput) ToPreventionPolicyAttachmentMapOutputWithContext(ctx context.Context) PreventionPolicyAttachmentMapOutput

type PreventionPolicyAttachmentOutput

type PreventionPolicyAttachmentOutput struct{ *pulumi.OutputState }

func (PreventionPolicyAttachmentOutput) ElementType

func (PreventionPolicyAttachmentOutput) HostGroups

Host Group ids to attach to the prevention policy.

func (PreventionPolicyAttachmentOutput) IdProperty

The prevention policy id you want to attach to.

func (PreventionPolicyAttachmentOutput) IoaRuleGroups

IOA Rule Group to attach to the prevention policy.

func (PreventionPolicyAttachmentOutput) LastUpdated

func (PreventionPolicyAttachmentOutput) ToPreventionPolicyAttachmentOutput

func (o PreventionPolicyAttachmentOutput) ToPreventionPolicyAttachmentOutput() PreventionPolicyAttachmentOutput

func (PreventionPolicyAttachmentOutput) ToPreventionPolicyAttachmentOutputWithContext

func (o PreventionPolicyAttachmentOutput) ToPreventionPolicyAttachmentOutputWithContext(ctx context.Context) PreventionPolicyAttachmentOutput

type PreventionPolicyAttachmentState

type PreventionPolicyAttachmentState struct {
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayInput
	// The prevention policy id you want to attach to.
	IdProperty pulumi.StringPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	LastUpdated   pulumi.StringPtrInput
}

func (PreventionPolicyAttachmentState) ElementType

type PreventionPolicyLinux

type PreventionPolicyLinux struct {
	pulumi.CustomResourceState

	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware PreventionPolicyLinuxCloudAntiMalwareOutput `pulumi:"cloudAntiMalware"`
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolOutput `pulumi:"customBlocking"`
	// Description of the prevention policy.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Whether to enable the setting. Block new processes originating from files written in a container. This prevents a container from drifting from its immutable runtime state.
	DriftPrevention pulumi.BoolOutput `pulumi:"driftPrevention"`
	// Whether to enable the setting. Allows the sensor to monitor SMTP, IMAP, and POP3 traffic for malicious patterns and improved detections.
	EmailProtocolVisibility pulumi.BoolOutput `pulumi:"emailProtocolVisibility"`
	// Enable the prevention policy.
	Enabled pulumi.BoolOutput `pulumi:"enabled"`
	// Whether to enable the setting. Allows the sensor to monitor full CLI commands that include pipes and redirects. This is applicable only for User mode.
	ExtendedCommandLineVisibility pulumi.BoolOutput `pulumi:"extendedCommandLineVisibility"`
	// Whether to enable the setting. Allows the sensor to monitor filesystem activity for additional telemetry and improved detections.
	FilesystemVisibility pulumi.BoolOutput `pulumi:"filesystemVisibility"`
	// Whether to enable the setting. Allows the sensor to monitor unencrypted FTP traffic for malicious patterns and improved detections.
	FtpVisibility pulumi.BoolOutput `pulumi:"ftpVisibility"`
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayOutput `pulumi:"hostGroups"`
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic for malicious patterns and improved detections.
	HttpVisibility pulumi.BoolOutput `pulumi:"httpVisibility"`
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayOutput `pulumi:"ioaRuleGroups"`
	LastUpdated   pulumi.StringOutput      `pulumi:"lastUpdated"`
	// Whether to enable the setting. When enabled, the sensor will inspect memory-related operations: mmap, mprotect, ptrace and reading/writing remote process memory and produce events.
	MemoryVisibility pulumi.BoolOutput `pulumi:"memoryVisibility"`
	// Name of the prevention policy.
	Name pulumi.StringOutput `pulumi:"name"`
	// Whether to enable the setting. Allows the sensor to monitor network activity for additional telemetry and improved detections.
	NetworkVisibility pulumi.BoolOutput `pulumi:"networkVisibility"`
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolOutput `pulumi:"onWriteScriptFileVisibility"`
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolOutput `pulumi:"preventSuspiciousProcesses"`
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolOutput `pulumi:"quarantine"`
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolOutput `pulumi:"scriptBasedExecutionMonitoring"`
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware PreventionPolicyLinuxSensorAntiMalwareOutput `pulumi:"sensorAntiMalware"`
	// Whether to enable the setting. Block attempts to tamper with the sensor by protecting critical components and resources. If disabled, the sensor still creates detections for tampering attempts but will not prevent the activity from occurring. Disabling is not recommended.
	SensorTamperingProtection pulumi.BoolOutput `pulumi:"sensorTamperingProtection"`
	// Whether to enable the setting. Allows the sensor to monitor TLS traffic for malicious patterns and improved detections.
	TlsVisibility pulumi.BoolOutput `pulumi:"tlsVisibility"`
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolOutput `pulumi:"uploadUnknownDetectionRelatedExecutables"`
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolOutput `pulumi:"uploadUnknownExecutables"`
}

This resource allows you to manage prevention policies for Linux hosts. Prevention policies allow you to manage what activity will trigger detections and preventions on your hosts.

## API Scopes

The following API scopes are required:

- Prevention policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := crowdstrike.NewPreventionPolicyLinux(ctx, "example", &crowdstrike.PreventionPolicyLinuxArgs{
			Enabled:       pulumi.Bool(true),
			Description:   pulumi.String("Made with Pulumi"),
			HostGroups:    pulumi.StringArray{},
			IoaRuleGroups: pulumi.StringArray{},
			CloudAntiMalware: &crowdstrike.PreventionPolicyLinuxCloudAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAntiMalware: &crowdstrike.PreventionPolicyLinuxSensorAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			Quarantine:                               pulumi.Bool(true),
			CustomBlocking:                           pulumi.Bool(true),
			PreventSuspiciousProcesses:               pulumi.Bool(true),
			ScriptBasedExecutionMonitoring:           pulumi.Bool(true),
			UploadUnknownExecutables:                 pulumi.Bool(true),
			UploadUnknownDetectionRelatedExecutables: pulumi.Bool(true),
			DriftPrevention:                          pulumi.Bool(true),
			EmailProtocolVisibility:                  pulumi.Bool(true),
			FilesystemVisibility:                     pulumi.Bool(true),
			FtpVisibility:                            pulumi.Bool(true),
			HttpVisibility:                           pulumi.Bool(true),
			NetworkVisibility:                        pulumi.Bool(true),
			TlsVisibility:                            pulumi.Bool(true),
			SensorTamperingProtection:                pulumi.Bool(true),
			OnWriteScriptFileVisibility:              pulumi.Bool(true),
			MemoryVisibility:                         pulumi.Bool(true),
			ExtendedCommandLineVisibility:            pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		ctx.Export("preventionPolicyLinux", example)
		return nil
	})
}

```

## Import

prevention policy can be imported by specifying the policy id.

```sh $ pulumi import crowdstrike:index/preventionPolicyLinux:PreventionPolicyLinux example 7fb858a949034a0cbca175f660f1e769 ```

func GetPreventionPolicyLinux

func GetPreventionPolicyLinux(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PreventionPolicyLinuxState, opts ...pulumi.ResourceOption) (*PreventionPolicyLinux, error)

GetPreventionPolicyLinux gets an existing PreventionPolicyLinux resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPreventionPolicyLinux

func NewPreventionPolicyLinux(ctx *pulumi.Context,
	name string, args *PreventionPolicyLinuxArgs, opts ...pulumi.ResourceOption) (*PreventionPolicyLinux, error)

NewPreventionPolicyLinux registers a new resource with the given unique name, arguments, and options.

func (*PreventionPolicyLinux) ElementType

func (*PreventionPolicyLinux) ElementType() reflect.Type

func (*PreventionPolicyLinux) ToPreventionPolicyLinuxOutput

func (i *PreventionPolicyLinux) ToPreventionPolicyLinuxOutput() PreventionPolicyLinuxOutput

func (*PreventionPolicyLinux) ToPreventionPolicyLinuxOutputWithContext

func (i *PreventionPolicyLinux) ToPreventionPolicyLinuxOutputWithContext(ctx context.Context) PreventionPolicyLinuxOutput

type PreventionPolicyLinuxArgs

type PreventionPolicyLinuxArgs struct {
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware PreventionPolicyLinuxCloudAntiMalwarePtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Block new processes originating from files written in a container. This prevents a container from drifting from its immutable runtime state.
	DriftPrevention pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor SMTP, IMAP, and POP3 traffic for malicious patterns and improved detections.
	EmailProtocolVisibility pulumi.BoolPtrInput
	// Enable the prevention policy.
	Enabled pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor full CLI commands that include pipes and redirects. This is applicable only for User mode.
	ExtendedCommandLineVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor filesystem activity for additional telemetry and improved detections.
	FilesystemVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted FTP traffic for malicious patterns and improved detections.
	FtpVisibility pulumi.BoolPtrInput
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic for malicious patterns and improved detections.
	HttpVisibility pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. When enabled, the sensor will inspect memory-related operations: mmap, mprotect, ptrace and reading/writing remote process memory and produce events.
	MemoryVisibility pulumi.BoolPtrInput
	// Name of the prevention policy.
	Name pulumi.StringPtrInput
	// Whether to enable the setting. Allows the sensor to monitor network activity for additional telemetry and improved detections.
	NetworkVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware PreventionPolicyLinuxSensorAntiMalwarePtrInput
	// Whether to enable the setting. Block attempts to tamper with the sensor by protecting critical components and resources. If disabled, the sensor still creates detections for tampering attempts but will not prevent the activity from occurring. Disabling is not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor TLS traffic for malicious patterns and improved detections.
	TlsVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
}

The set of arguments for constructing a PreventionPolicyLinux resource.

func (PreventionPolicyLinuxArgs) ElementType

func (PreventionPolicyLinuxArgs) ElementType() reflect.Type

type PreventionPolicyLinuxArray

type PreventionPolicyLinuxArray []PreventionPolicyLinuxInput

func (PreventionPolicyLinuxArray) ElementType

func (PreventionPolicyLinuxArray) ElementType() reflect.Type

func (PreventionPolicyLinuxArray) ToPreventionPolicyLinuxArrayOutput

func (i PreventionPolicyLinuxArray) ToPreventionPolicyLinuxArrayOutput() PreventionPolicyLinuxArrayOutput

func (PreventionPolicyLinuxArray) ToPreventionPolicyLinuxArrayOutputWithContext

func (i PreventionPolicyLinuxArray) ToPreventionPolicyLinuxArrayOutputWithContext(ctx context.Context) PreventionPolicyLinuxArrayOutput

type PreventionPolicyLinuxArrayInput

type PreventionPolicyLinuxArrayInput interface {
	pulumi.Input

	ToPreventionPolicyLinuxArrayOutput() PreventionPolicyLinuxArrayOutput
	ToPreventionPolicyLinuxArrayOutputWithContext(context.Context) PreventionPolicyLinuxArrayOutput
}

PreventionPolicyLinuxArrayInput is an input type that accepts PreventionPolicyLinuxArray and PreventionPolicyLinuxArrayOutput values. You can construct a concrete instance of `PreventionPolicyLinuxArrayInput` via:

PreventionPolicyLinuxArray{ PreventionPolicyLinuxArgs{...} }

type PreventionPolicyLinuxArrayOutput

type PreventionPolicyLinuxArrayOutput struct{ *pulumi.OutputState }

func (PreventionPolicyLinuxArrayOutput) ElementType

func (PreventionPolicyLinuxArrayOutput) Index

func (PreventionPolicyLinuxArrayOutput) ToPreventionPolicyLinuxArrayOutput

func (o PreventionPolicyLinuxArrayOutput) ToPreventionPolicyLinuxArrayOutput() PreventionPolicyLinuxArrayOutput

func (PreventionPolicyLinuxArrayOutput) ToPreventionPolicyLinuxArrayOutputWithContext

func (o PreventionPolicyLinuxArrayOutput) ToPreventionPolicyLinuxArrayOutputWithContext(ctx context.Context) PreventionPolicyLinuxArrayOutput

type PreventionPolicyLinuxCloudAntiMalware

type PreventionPolicyLinuxCloudAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyLinuxCloudAntiMalwareArgs

type PreventionPolicyLinuxCloudAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyLinuxCloudAntiMalwareArgs) ElementType

func (PreventionPolicyLinuxCloudAntiMalwareArgs) ToPreventionPolicyLinuxCloudAntiMalwareOutput

func (i PreventionPolicyLinuxCloudAntiMalwareArgs) ToPreventionPolicyLinuxCloudAntiMalwareOutput() PreventionPolicyLinuxCloudAntiMalwareOutput

func (PreventionPolicyLinuxCloudAntiMalwareArgs) ToPreventionPolicyLinuxCloudAntiMalwareOutputWithContext

func (i PreventionPolicyLinuxCloudAntiMalwareArgs) ToPreventionPolicyLinuxCloudAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyLinuxCloudAntiMalwareOutput

func (PreventionPolicyLinuxCloudAntiMalwareArgs) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (i PreventionPolicyLinuxCloudAntiMalwareArgs) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutput() PreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (PreventionPolicyLinuxCloudAntiMalwareArgs) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext

func (i PreventionPolicyLinuxCloudAntiMalwareArgs) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyLinuxCloudAntiMalwarePtrOutput

type PreventionPolicyLinuxCloudAntiMalwareInput

type PreventionPolicyLinuxCloudAntiMalwareInput interface {
	pulumi.Input

	ToPreventionPolicyLinuxCloudAntiMalwareOutput() PreventionPolicyLinuxCloudAntiMalwareOutput
	ToPreventionPolicyLinuxCloudAntiMalwareOutputWithContext(context.Context) PreventionPolicyLinuxCloudAntiMalwareOutput
}

PreventionPolicyLinuxCloudAntiMalwareInput is an input type that accepts PreventionPolicyLinuxCloudAntiMalwareArgs and PreventionPolicyLinuxCloudAntiMalwareOutput values. You can construct a concrete instance of `PreventionPolicyLinuxCloudAntiMalwareInput` via:

PreventionPolicyLinuxCloudAntiMalwareArgs{...}

type PreventionPolicyLinuxCloudAntiMalwareOutput

type PreventionPolicyLinuxCloudAntiMalwareOutput struct{ *pulumi.OutputState }

func (PreventionPolicyLinuxCloudAntiMalwareOutput) Detection

Machine learning level for detection.

func (PreventionPolicyLinuxCloudAntiMalwareOutput) ElementType

func (PreventionPolicyLinuxCloudAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyLinuxCloudAntiMalwareOutput) ToPreventionPolicyLinuxCloudAntiMalwareOutput

func (o PreventionPolicyLinuxCloudAntiMalwareOutput) ToPreventionPolicyLinuxCloudAntiMalwareOutput() PreventionPolicyLinuxCloudAntiMalwareOutput

func (PreventionPolicyLinuxCloudAntiMalwareOutput) ToPreventionPolicyLinuxCloudAntiMalwareOutputWithContext

func (o PreventionPolicyLinuxCloudAntiMalwareOutput) ToPreventionPolicyLinuxCloudAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyLinuxCloudAntiMalwareOutput

func (PreventionPolicyLinuxCloudAntiMalwareOutput) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (o PreventionPolicyLinuxCloudAntiMalwareOutput) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutput() PreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (PreventionPolicyLinuxCloudAntiMalwareOutput) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext

func (o PreventionPolicyLinuxCloudAntiMalwareOutput) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyLinuxCloudAntiMalwarePtrOutput

type PreventionPolicyLinuxCloudAntiMalwarePtrInput

type PreventionPolicyLinuxCloudAntiMalwarePtrInput interface {
	pulumi.Input

	ToPreventionPolicyLinuxCloudAntiMalwarePtrOutput() PreventionPolicyLinuxCloudAntiMalwarePtrOutput
	ToPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext(context.Context) PreventionPolicyLinuxCloudAntiMalwarePtrOutput
}

PreventionPolicyLinuxCloudAntiMalwarePtrInput is an input type that accepts PreventionPolicyLinuxCloudAntiMalwareArgs, PreventionPolicyLinuxCloudAntiMalwarePtr and PreventionPolicyLinuxCloudAntiMalwarePtrOutput values. You can construct a concrete instance of `PreventionPolicyLinuxCloudAntiMalwarePtrInput` via:

        PreventionPolicyLinuxCloudAntiMalwareArgs{...}

or:

        nil

type PreventionPolicyLinuxCloudAntiMalwarePtrOutput

type PreventionPolicyLinuxCloudAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyLinuxCloudAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyLinuxCloudAntiMalwarePtrOutput) Elem

func (PreventionPolicyLinuxCloudAntiMalwarePtrOutput) ElementType

func (PreventionPolicyLinuxCloudAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyLinuxCloudAntiMalwarePtrOutput) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (o PreventionPolicyLinuxCloudAntiMalwarePtrOutput) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutput() PreventionPolicyLinuxCloudAntiMalwarePtrOutput

func (PreventionPolicyLinuxCloudAntiMalwarePtrOutput) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext

func (o PreventionPolicyLinuxCloudAntiMalwarePtrOutput) ToPreventionPolicyLinuxCloudAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyLinuxCloudAntiMalwarePtrOutput

type PreventionPolicyLinuxInput

type PreventionPolicyLinuxInput interface {
	pulumi.Input

	ToPreventionPolicyLinuxOutput() PreventionPolicyLinuxOutput
	ToPreventionPolicyLinuxOutputWithContext(ctx context.Context) PreventionPolicyLinuxOutput
}

type PreventionPolicyLinuxMap

type PreventionPolicyLinuxMap map[string]PreventionPolicyLinuxInput

func (PreventionPolicyLinuxMap) ElementType

func (PreventionPolicyLinuxMap) ElementType() reflect.Type

func (PreventionPolicyLinuxMap) ToPreventionPolicyLinuxMapOutput

func (i PreventionPolicyLinuxMap) ToPreventionPolicyLinuxMapOutput() PreventionPolicyLinuxMapOutput

func (PreventionPolicyLinuxMap) ToPreventionPolicyLinuxMapOutputWithContext

func (i PreventionPolicyLinuxMap) ToPreventionPolicyLinuxMapOutputWithContext(ctx context.Context) PreventionPolicyLinuxMapOutput

type PreventionPolicyLinuxMapInput

type PreventionPolicyLinuxMapInput interface {
	pulumi.Input

	ToPreventionPolicyLinuxMapOutput() PreventionPolicyLinuxMapOutput
	ToPreventionPolicyLinuxMapOutputWithContext(context.Context) PreventionPolicyLinuxMapOutput
}

PreventionPolicyLinuxMapInput is an input type that accepts PreventionPolicyLinuxMap and PreventionPolicyLinuxMapOutput values. You can construct a concrete instance of `PreventionPolicyLinuxMapInput` via:

PreventionPolicyLinuxMap{ "key": PreventionPolicyLinuxArgs{...} }

type PreventionPolicyLinuxMapOutput

type PreventionPolicyLinuxMapOutput struct{ *pulumi.OutputState }

func (PreventionPolicyLinuxMapOutput) ElementType

func (PreventionPolicyLinuxMapOutput) MapIndex

func (PreventionPolicyLinuxMapOutput) ToPreventionPolicyLinuxMapOutput

func (o PreventionPolicyLinuxMapOutput) ToPreventionPolicyLinuxMapOutput() PreventionPolicyLinuxMapOutput

func (PreventionPolicyLinuxMapOutput) ToPreventionPolicyLinuxMapOutputWithContext

func (o PreventionPolicyLinuxMapOutput) ToPreventionPolicyLinuxMapOutputWithContext(ctx context.Context) PreventionPolicyLinuxMapOutput

type PreventionPolicyLinuxOutput

type PreventionPolicyLinuxOutput struct{ *pulumi.OutputState }

func (PreventionPolicyLinuxOutput) CloudAntiMalware

Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.

func (PreventionPolicyLinuxOutput) CustomBlocking

func (o PreventionPolicyLinuxOutput) CustomBlocking() pulumi.BoolOutput

Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".

func (PreventionPolicyLinuxOutput) Description

Description of the prevention policy.

func (PreventionPolicyLinuxOutput) DriftPrevention

func (o PreventionPolicyLinuxOutput) DriftPrevention() pulumi.BoolOutput

Whether to enable the setting. Block new processes originating from files written in a container. This prevents a container from drifting from its immutable runtime state.

func (PreventionPolicyLinuxOutput) ElementType

func (PreventionPolicyLinuxOutput) EmailProtocolVisibility

func (o PreventionPolicyLinuxOutput) EmailProtocolVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor SMTP, IMAP, and POP3 traffic for malicious patterns and improved detections.

func (PreventionPolicyLinuxOutput) Enabled

Enable the prevention policy.

func (PreventionPolicyLinuxOutput) ExtendedCommandLineVisibility

func (o PreventionPolicyLinuxOutput) ExtendedCommandLineVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor full CLI commands that include pipes and redirects. This is applicable only for User mode.

func (PreventionPolicyLinuxOutput) FilesystemVisibility

func (o PreventionPolicyLinuxOutput) FilesystemVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor filesystem activity for additional telemetry and improved detections.

func (PreventionPolicyLinuxOutput) FtpVisibility

func (o PreventionPolicyLinuxOutput) FtpVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor unencrypted FTP traffic for malicious patterns and improved detections.

func (PreventionPolicyLinuxOutput) HostGroups

Host Group ids to attach to the prevention policy.

func (PreventionPolicyLinuxOutput) HttpVisibility

func (o PreventionPolicyLinuxOutput) HttpVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic for malicious patterns and improved detections.

func (PreventionPolicyLinuxOutput) IoaRuleGroups

IOA Rule Group to attach to the prevention policy.

func (PreventionPolicyLinuxOutput) LastUpdated

func (PreventionPolicyLinuxOutput) MemoryVisibility

func (o PreventionPolicyLinuxOutput) MemoryVisibility() pulumi.BoolOutput

Whether to enable the setting. When enabled, the sensor will inspect memory-related operations: mmap, mprotect, ptrace and reading/writing remote process memory and produce events.

func (PreventionPolicyLinuxOutput) Name

Name of the prevention policy.

func (PreventionPolicyLinuxOutput) NetworkVisibility

func (o PreventionPolicyLinuxOutput) NetworkVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor network activity for additional telemetry and improved detections.

func (PreventionPolicyLinuxOutput) OnWriteScriptFileVisibility

func (o PreventionPolicyLinuxOutput) OnWriteScriptFileVisibility() pulumi.BoolOutput

Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.

func (PreventionPolicyLinuxOutput) PreventSuspiciousProcesses

func (o PreventionPolicyLinuxOutput) PreventSuspiciousProcesses() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.

func (PreventionPolicyLinuxOutput) Quarantine

Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.

func (PreventionPolicyLinuxOutput) ScriptBasedExecutionMonitoring

func (o PreventionPolicyLinuxOutput) ScriptBasedExecutionMonitoring() pulumi.BoolOutput

Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.

func (PreventionPolicyLinuxOutput) SensorAntiMalware

For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.

func (PreventionPolicyLinuxOutput) SensorTamperingProtection

func (o PreventionPolicyLinuxOutput) SensorTamperingProtection() pulumi.BoolOutput

Whether to enable the setting. Block attempts to tamper with the sensor by protecting critical components and resources. If disabled, the sensor still creates detections for tampering attempts but will not prevent the activity from occurring. Disabling is not recommended.

func (PreventionPolicyLinuxOutput) TlsVisibility

func (o PreventionPolicyLinuxOutput) TlsVisibility() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor TLS traffic for malicious patterns and improved detections.

func (PreventionPolicyLinuxOutput) ToPreventionPolicyLinuxOutput

func (o PreventionPolicyLinuxOutput) ToPreventionPolicyLinuxOutput() PreventionPolicyLinuxOutput

func (PreventionPolicyLinuxOutput) ToPreventionPolicyLinuxOutputWithContext

func (o PreventionPolicyLinuxOutput) ToPreventionPolicyLinuxOutputWithContext(ctx context.Context) PreventionPolicyLinuxOutput

func (PreventionPolicyLinuxOutput) UploadUnknownDetectionRelatedExecutables

func (o PreventionPolicyLinuxOutput) UploadUnknownDetectionRelatedExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.

func (PreventionPolicyLinuxOutput) UploadUnknownExecutables

func (o PreventionPolicyLinuxOutput) UploadUnknownExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.

type PreventionPolicyLinuxSensorAntiMalware

type PreventionPolicyLinuxSensorAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyLinuxSensorAntiMalwareArgs

type PreventionPolicyLinuxSensorAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyLinuxSensorAntiMalwareArgs) ElementType

func (PreventionPolicyLinuxSensorAntiMalwareArgs) ToPreventionPolicyLinuxSensorAntiMalwareOutput

func (i PreventionPolicyLinuxSensorAntiMalwareArgs) ToPreventionPolicyLinuxSensorAntiMalwareOutput() PreventionPolicyLinuxSensorAntiMalwareOutput

func (PreventionPolicyLinuxSensorAntiMalwareArgs) ToPreventionPolicyLinuxSensorAntiMalwareOutputWithContext

func (i PreventionPolicyLinuxSensorAntiMalwareArgs) ToPreventionPolicyLinuxSensorAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyLinuxSensorAntiMalwareOutput

func (PreventionPolicyLinuxSensorAntiMalwareArgs) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (i PreventionPolicyLinuxSensorAntiMalwareArgs) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutput() PreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (PreventionPolicyLinuxSensorAntiMalwareArgs) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext

func (i PreventionPolicyLinuxSensorAntiMalwareArgs) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyLinuxSensorAntiMalwarePtrOutput

type PreventionPolicyLinuxSensorAntiMalwareInput

type PreventionPolicyLinuxSensorAntiMalwareInput interface {
	pulumi.Input

	ToPreventionPolicyLinuxSensorAntiMalwareOutput() PreventionPolicyLinuxSensorAntiMalwareOutput
	ToPreventionPolicyLinuxSensorAntiMalwareOutputWithContext(context.Context) PreventionPolicyLinuxSensorAntiMalwareOutput
}

PreventionPolicyLinuxSensorAntiMalwareInput is an input type that accepts PreventionPolicyLinuxSensorAntiMalwareArgs and PreventionPolicyLinuxSensorAntiMalwareOutput values. You can construct a concrete instance of `PreventionPolicyLinuxSensorAntiMalwareInput` via:

PreventionPolicyLinuxSensorAntiMalwareArgs{...}

type PreventionPolicyLinuxSensorAntiMalwareOutput

type PreventionPolicyLinuxSensorAntiMalwareOutput struct{ *pulumi.OutputState }

func (PreventionPolicyLinuxSensorAntiMalwareOutput) Detection

Machine learning level for detection.

func (PreventionPolicyLinuxSensorAntiMalwareOutput) ElementType

func (PreventionPolicyLinuxSensorAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyLinuxSensorAntiMalwareOutput) ToPreventionPolicyLinuxSensorAntiMalwareOutput

func (o PreventionPolicyLinuxSensorAntiMalwareOutput) ToPreventionPolicyLinuxSensorAntiMalwareOutput() PreventionPolicyLinuxSensorAntiMalwareOutput

func (PreventionPolicyLinuxSensorAntiMalwareOutput) ToPreventionPolicyLinuxSensorAntiMalwareOutputWithContext

func (o PreventionPolicyLinuxSensorAntiMalwareOutput) ToPreventionPolicyLinuxSensorAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyLinuxSensorAntiMalwareOutput

func (PreventionPolicyLinuxSensorAntiMalwareOutput) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (o PreventionPolicyLinuxSensorAntiMalwareOutput) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutput() PreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (PreventionPolicyLinuxSensorAntiMalwareOutput) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext

func (o PreventionPolicyLinuxSensorAntiMalwareOutput) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyLinuxSensorAntiMalwarePtrOutput

type PreventionPolicyLinuxSensorAntiMalwarePtrInput

type PreventionPolicyLinuxSensorAntiMalwarePtrInput interface {
	pulumi.Input

	ToPreventionPolicyLinuxSensorAntiMalwarePtrOutput() PreventionPolicyLinuxSensorAntiMalwarePtrOutput
	ToPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext(context.Context) PreventionPolicyLinuxSensorAntiMalwarePtrOutput
}

PreventionPolicyLinuxSensorAntiMalwarePtrInput is an input type that accepts PreventionPolicyLinuxSensorAntiMalwareArgs, PreventionPolicyLinuxSensorAntiMalwarePtr and PreventionPolicyLinuxSensorAntiMalwarePtrOutput values. You can construct a concrete instance of `PreventionPolicyLinuxSensorAntiMalwarePtrInput` via:

        PreventionPolicyLinuxSensorAntiMalwareArgs{...}

or:

        nil

type PreventionPolicyLinuxSensorAntiMalwarePtrOutput

type PreventionPolicyLinuxSensorAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyLinuxSensorAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyLinuxSensorAntiMalwarePtrOutput) Elem

func (PreventionPolicyLinuxSensorAntiMalwarePtrOutput) ElementType

func (PreventionPolicyLinuxSensorAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyLinuxSensorAntiMalwarePtrOutput) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (o PreventionPolicyLinuxSensorAntiMalwarePtrOutput) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutput() PreventionPolicyLinuxSensorAntiMalwarePtrOutput

func (PreventionPolicyLinuxSensorAntiMalwarePtrOutput) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext

func (o PreventionPolicyLinuxSensorAntiMalwarePtrOutput) ToPreventionPolicyLinuxSensorAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyLinuxSensorAntiMalwarePtrOutput

type PreventionPolicyLinuxState

type PreventionPolicyLinuxState struct {
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware PreventionPolicyLinuxCloudAntiMalwarePtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Block new processes originating from files written in a container. This prevents a container from drifting from its immutable runtime state.
	DriftPrevention pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor SMTP, IMAP, and POP3 traffic for malicious patterns and improved detections.
	EmailProtocolVisibility pulumi.BoolPtrInput
	// Enable the prevention policy.
	Enabled pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor full CLI commands that include pipes and redirects. This is applicable only for User mode.
	ExtendedCommandLineVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor filesystem activity for additional telemetry and improved detections.
	FilesystemVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted FTP traffic for malicious patterns and improved detections.
	FtpVisibility pulumi.BoolPtrInput
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic for malicious patterns and improved detections.
	HttpVisibility pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	LastUpdated   pulumi.StringPtrInput
	// Whether to enable the setting. When enabled, the sensor will inspect memory-related operations: mmap, mprotect, ptrace and reading/writing remote process memory and produce events.
	MemoryVisibility pulumi.BoolPtrInput
	// Name of the prevention policy.
	Name pulumi.StringPtrInput
	// Whether to enable the setting. Allows the sensor to monitor network activity for additional telemetry and improved detections.
	NetworkVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware PreventionPolicyLinuxSensorAntiMalwarePtrInput
	// Whether to enable the setting. Block attempts to tamper with the sensor by protecting critical components and resources. If disabled, the sensor still creates detections for tampering attempts but will not prevent the activity from occurring. Disabling is not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Allows the sensor to monitor TLS traffic for malicious patterns and improved detections.
	TlsVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
}

func (PreventionPolicyLinuxState) ElementType

func (PreventionPolicyLinuxState) ElementType() reflect.Type

type PreventionPolicyMac

type PreventionPolicyMac struct {
	pulumi.CustomResourceState

	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolOutput `pulumi:"chopperWebshell"`
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	CloudAdwareAndPup PreventionPolicyMacCloudAdwareAndPupOutput `pulumi:"cloudAdwareAndPup"`
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware PreventionPolicyMacCloudAntiMalwareOutput `pulumi:"cloudAntiMalware"`
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolOutput `pulumi:"customBlocking"`
	// Description of the prevention policy.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolOutput `pulumi:"detectOnWrite"`
	// Whether to enable the setting. A process with behaviors indicative of the Empyre Backdoor was terminated.
	EmpyreBackdoor pulumi.BoolOutput `pulumi:"empyreBackdoor"`
	// Enable the prevention policy.
	Enabled pulumi.BoolOutput `pulumi:"enabled"`
	// Whether to enable the setting. An attempt to dump a user’s hashed password was blocked.
	HashCollector pulumi.BoolOutput `pulumi:"hashCollector"`
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayOutput `pulumi:"hostGroups"`
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolOutput `pulumi:"intelligenceSourcedThreats"`
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayOutput `pulumi:"ioaRuleGroups"`
	// Whether to enable the setting. An attempt to recover a plaintext password via the kcpassword file was blocked.
	KcPasswordDecoded pulumi.BoolOutput   `pulumi:"kcPasswordDecoded"`
	LastUpdated       pulumi.StringOutput `pulumi:"lastUpdated"`
	// Name of the prevention policy.
	Name pulumi.StringOutput `pulumi:"name"`
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. See these messages in Console.app by searching for Process: Falcon Notifications.
	NotifyEndUsers pulumi.BoolOutput `pulumi:"notifyEndUsers"`
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolOutput `pulumi:"preventSuspiciousProcesses"`
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolOutput `pulumi:"quarantine"`
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolOutput `pulumi:"quarantineOnWrite"`
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolOutput `pulumi:"scriptBasedExecutionMonitoring"`
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent adware and potentially unwanted programs (PUP).
	SensorAdwareAndPup PreventionPolicyMacSensorAdwareAndPupOutput `pulumi:"sensorAdwareAndPup"`
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware PreventionPolicyMacSensorAntiMalwareOutput `pulumi:"sensorAntiMalware"`
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolOutput `pulumi:"sensorTamperingProtection"`
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolOutput `pulumi:"uploadUnknownDetectionRelatedExecutables"`
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolOutput `pulumi:"uploadUnknownExecutables"`
	// Whether to enable the setting. The execution of an XPCOM shell was blocked.
	XpcomShell pulumi.BoolOutput `pulumi:"xpcomShell"`
}

This resource allows you to manage prevention policies for Mac hosts. Prevention policies allow you to manage what activity will trigger detections and preventions on your hosts.

## API Scopes

The following API scopes are required:

- Prevention policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := crowdstrike.NewPreventionPolicyMac(ctx, "example", &crowdstrike.PreventionPolicyMacArgs{
			Enabled:       pulumi.Bool(false),
			Description:   pulumi.String("Made with Pulumi"),
			HostGroups:    pulumi.StringArray{},
			IoaRuleGroups: pulumi.StringArray{},
			CloudAdwareAndPup: &crowdstrike.PreventionPolicyMacCloudAdwareAndPupArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			CloudAntiMalware: &crowdstrike.PreventionPolicyMacCloudAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAntiMalware: &crowdstrike.PreventionPolicyMacSensorAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAdwareAndPup: &crowdstrike.PreventionPolicyMacSensorAdwareAndPupArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			NotifyEndUsers:                           pulumi.Bool(true),
			CustomBlocking:                           pulumi.Bool(true),
			DetectOnWrite:                            pulumi.Bool(true),
			IntelligenceSourcedThreats:               pulumi.Bool(true),
			PreventSuspiciousProcesses:               pulumi.Bool(true),
			Quarantine:                               pulumi.Bool(true),
			QuarantineOnWrite:                        pulumi.Bool(true),
			ScriptBasedExecutionMonitoring:           pulumi.Bool(true),
			SensorTamperingProtection:                pulumi.Bool(true),
			UploadUnknownExecutables:                 pulumi.Bool(true),
			UploadUnknownDetectionRelatedExecutables: pulumi.Bool(true),
			XpcomShell:                               pulumi.Bool(true),
			KcPasswordDecoded:                        pulumi.Bool(true),
			HashCollector:                            pulumi.Bool(true),
			EmpyreBackdoor:                           pulumi.Bool(true),
			ChopperWebshell:                          pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		ctx.Export("preventionPolicyMac", example)
		return nil
	})
}

```

## Import

prevention policy can be imported by specifying the policy id.

```sh $ pulumi import crowdstrike:index/preventionPolicyMac:PreventionPolicyMac example 7fb858a949034a0cbca175f660f1e769 ```

func GetPreventionPolicyMac

func GetPreventionPolicyMac(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PreventionPolicyMacState, opts ...pulumi.ResourceOption) (*PreventionPolicyMac, error)

GetPreventionPolicyMac gets an existing PreventionPolicyMac resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPreventionPolicyMac

func NewPreventionPolicyMac(ctx *pulumi.Context,
	name string, args *PreventionPolicyMacArgs, opts ...pulumi.ResourceOption) (*PreventionPolicyMac, error)

NewPreventionPolicyMac registers a new resource with the given unique name, arguments, and options.

func (*PreventionPolicyMac) ElementType

func (*PreventionPolicyMac) ElementType() reflect.Type

func (*PreventionPolicyMac) ToPreventionPolicyMacOutput

func (i *PreventionPolicyMac) ToPreventionPolicyMacOutput() PreventionPolicyMacOutput

func (*PreventionPolicyMac) ToPreventionPolicyMacOutputWithContext

func (i *PreventionPolicyMac) ToPreventionPolicyMacOutputWithContext(ctx context.Context) PreventionPolicyMacOutput

type PreventionPolicyMacArgs

type PreventionPolicyMacArgs struct {
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	CloudAdwareAndPup PreventionPolicyMacCloudAdwareAndPupPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware PreventionPolicyMacCloudAntiMalwarePtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. A process with behaviors indicative of the Empyre Backdoor was terminated.
	EmpyreBackdoor pulumi.BoolPtrInput
	// Enable the prevention policy.
	Enabled pulumi.BoolPtrInput
	// Whether to enable the setting. An attempt to dump a user’s hashed password was blocked.
	HashCollector pulumi.BoolPtrInput
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayInput
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. An attempt to recover a plaintext password via the kcpassword file was blocked.
	KcPasswordDecoded pulumi.BoolPtrInput
	// Name of the prevention policy.
	Name pulumi.StringPtrInput
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. See these messages in Console.app by searching for Process: Falcon Notifications.
	NotifyEndUsers pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolPtrInput
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent adware and potentially unwanted programs (PUP).
	SensorAdwareAndPup PreventionPolicyMacSensorAdwareAndPupPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware PreventionPolicyMacSensorAntiMalwarePtrInput
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. The execution of an XPCOM shell was blocked.
	XpcomShell pulumi.BoolPtrInput
}

The set of arguments for constructing a PreventionPolicyMac resource.

func (PreventionPolicyMacArgs) ElementType

func (PreventionPolicyMacArgs) ElementType() reflect.Type

type PreventionPolicyMacArray

type PreventionPolicyMacArray []PreventionPolicyMacInput

func (PreventionPolicyMacArray) ElementType

func (PreventionPolicyMacArray) ElementType() reflect.Type

func (PreventionPolicyMacArray) ToPreventionPolicyMacArrayOutput

func (i PreventionPolicyMacArray) ToPreventionPolicyMacArrayOutput() PreventionPolicyMacArrayOutput

func (PreventionPolicyMacArray) ToPreventionPolicyMacArrayOutputWithContext

func (i PreventionPolicyMacArray) ToPreventionPolicyMacArrayOutputWithContext(ctx context.Context) PreventionPolicyMacArrayOutput

type PreventionPolicyMacArrayInput

type PreventionPolicyMacArrayInput interface {
	pulumi.Input

	ToPreventionPolicyMacArrayOutput() PreventionPolicyMacArrayOutput
	ToPreventionPolicyMacArrayOutputWithContext(context.Context) PreventionPolicyMacArrayOutput
}

PreventionPolicyMacArrayInput is an input type that accepts PreventionPolicyMacArray and PreventionPolicyMacArrayOutput values. You can construct a concrete instance of `PreventionPolicyMacArrayInput` via:

PreventionPolicyMacArray{ PreventionPolicyMacArgs{...} }

type PreventionPolicyMacArrayOutput

type PreventionPolicyMacArrayOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacArrayOutput) ElementType

func (PreventionPolicyMacArrayOutput) Index

func (PreventionPolicyMacArrayOutput) ToPreventionPolicyMacArrayOutput

func (o PreventionPolicyMacArrayOutput) ToPreventionPolicyMacArrayOutput() PreventionPolicyMacArrayOutput

func (PreventionPolicyMacArrayOutput) ToPreventionPolicyMacArrayOutputWithContext

func (o PreventionPolicyMacArrayOutput) ToPreventionPolicyMacArrayOutputWithContext(ctx context.Context) PreventionPolicyMacArrayOutput

type PreventionPolicyMacCloudAdwareAndPup

type PreventionPolicyMacCloudAdwareAndPup struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyMacCloudAdwareAndPupArgs

type PreventionPolicyMacCloudAdwareAndPupArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyMacCloudAdwareAndPupArgs) ElementType

func (PreventionPolicyMacCloudAdwareAndPupArgs) ToPreventionPolicyMacCloudAdwareAndPupOutput

func (i PreventionPolicyMacCloudAdwareAndPupArgs) ToPreventionPolicyMacCloudAdwareAndPupOutput() PreventionPolicyMacCloudAdwareAndPupOutput

func (PreventionPolicyMacCloudAdwareAndPupArgs) ToPreventionPolicyMacCloudAdwareAndPupOutputWithContext

func (i PreventionPolicyMacCloudAdwareAndPupArgs) ToPreventionPolicyMacCloudAdwareAndPupOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAdwareAndPupOutput

func (PreventionPolicyMacCloudAdwareAndPupArgs) ToPreventionPolicyMacCloudAdwareAndPupPtrOutput

func (i PreventionPolicyMacCloudAdwareAndPupArgs) ToPreventionPolicyMacCloudAdwareAndPupPtrOutput() PreventionPolicyMacCloudAdwareAndPupPtrOutput

func (PreventionPolicyMacCloudAdwareAndPupArgs) ToPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext

func (i PreventionPolicyMacCloudAdwareAndPupArgs) ToPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAdwareAndPupPtrOutput

type PreventionPolicyMacCloudAdwareAndPupInput

type PreventionPolicyMacCloudAdwareAndPupInput interface {
	pulumi.Input

	ToPreventionPolicyMacCloudAdwareAndPupOutput() PreventionPolicyMacCloudAdwareAndPupOutput
	ToPreventionPolicyMacCloudAdwareAndPupOutputWithContext(context.Context) PreventionPolicyMacCloudAdwareAndPupOutput
}

PreventionPolicyMacCloudAdwareAndPupInput is an input type that accepts PreventionPolicyMacCloudAdwareAndPupArgs and PreventionPolicyMacCloudAdwareAndPupOutput values. You can construct a concrete instance of `PreventionPolicyMacCloudAdwareAndPupInput` via:

PreventionPolicyMacCloudAdwareAndPupArgs{...}

type PreventionPolicyMacCloudAdwareAndPupOutput

type PreventionPolicyMacCloudAdwareAndPupOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacCloudAdwareAndPupOutput) Detection

Machine learning level for detection.

func (PreventionPolicyMacCloudAdwareAndPupOutput) ElementType

func (PreventionPolicyMacCloudAdwareAndPupOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyMacCloudAdwareAndPupOutput) ToPreventionPolicyMacCloudAdwareAndPupOutput

func (o PreventionPolicyMacCloudAdwareAndPupOutput) ToPreventionPolicyMacCloudAdwareAndPupOutput() PreventionPolicyMacCloudAdwareAndPupOutput

func (PreventionPolicyMacCloudAdwareAndPupOutput) ToPreventionPolicyMacCloudAdwareAndPupOutputWithContext

func (o PreventionPolicyMacCloudAdwareAndPupOutput) ToPreventionPolicyMacCloudAdwareAndPupOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAdwareAndPupOutput

func (PreventionPolicyMacCloudAdwareAndPupOutput) ToPreventionPolicyMacCloudAdwareAndPupPtrOutput

func (o PreventionPolicyMacCloudAdwareAndPupOutput) ToPreventionPolicyMacCloudAdwareAndPupPtrOutput() PreventionPolicyMacCloudAdwareAndPupPtrOutput

func (PreventionPolicyMacCloudAdwareAndPupOutput) ToPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext

func (o PreventionPolicyMacCloudAdwareAndPupOutput) ToPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAdwareAndPupPtrOutput

type PreventionPolicyMacCloudAdwareAndPupPtrInput

type PreventionPolicyMacCloudAdwareAndPupPtrInput interface {
	pulumi.Input

	ToPreventionPolicyMacCloudAdwareAndPupPtrOutput() PreventionPolicyMacCloudAdwareAndPupPtrOutput
	ToPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext(context.Context) PreventionPolicyMacCloudAdwareAndPupPtrOutput
}

PreventionPolicyMacCloudAdwareAndPupPtrInput is an input type that accepts PreventionPolicyMacCloudAdwareAndPupArgs, PreventionPolicyMacCloudAdwareAndPupPtr and PreventionPolicyMacCloudAdwareAndPupPtrOutput values. You can construct a concrete instance of `PreventionPolicyMacCloudAdwareAndPupPtrInput` via:

        PreventionPolicyMacCloudAdwareAndPupArgs{...}

or:

        nil

type PreventionPolicyMacCloudAdwareAndPupPtrOutput

type PreventionPolicyMacCloudAdwareAndPupPtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacCloudAdwareAndPupPtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyMacCloudAdwareAndPupPtrOutput) Elem

func (PreventionPolicyMacCloudAdwareAndPupPtrOutput) ElementType

func (PreventionPolicyMacCloudAdwareAndPupPtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyMacCloudAdwareAndPupPtrOutput) ToPreventionPolicyMacCloudAdwareAndPupPtrOutput

func (o PreventionPolicyMacCloudAdwareAndPupPtrOutput) ToPreventionPolicyMacCloudAdwareAndPupPtrOutput() PreventionPolicyMacCloudAdwareAndPupPtrOutput

func (PreventionPolicyMacCloudAdwareAndPupPtrOutput) ToPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext

func (o PreventionPolicyMacCloudAdwareAndPupPtrOutput) ToPreventionPolicyMacCloudAdwareAndPupPtrOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAdwareAndPupPtrOutput

type PreventionPolicyMacCloudAntiMalware

type PreventionPolicyMacCloudAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyMacCloudAntiMalwareArgs

type PreventionPolicyMacCloudAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyMacCloudAntiMalwareArgs) ElementType

func (PreventionPolicyMacCloudAntiMalwareArgs) ToPreventionPolicyMacCloudAntiMalwareOutput

func (i PreventionPolicyMacCloudAntiMalwareArgs) ToPreventionPolicyMacCloudAntiMalwareOutput() PreventionPolicyMacCloudAntiMalwareOutput

func (PreventionPolicyMacCloudAntiMalwareArgs) ToPreventionPolicyMacCloudAntiMalwareOutputWithContext

func (i PreventionPolicyMacCloudAntiMalwareArgs) ToPreventionPolicyMacCloudAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAntiMalwareOutput

func (PreventionPolicyMacCloudAntiMalwareArgs) ToPreventionPolicyMacCloudAntiMalwarePtrOutput

func (i PreventionPolicyMacCloudAntiMalwareArgs) ToPreventionPolicyMacCloudAntiMalwarePtrOutput() PreventionPolicyMacCloudAntiMalwarePtrOutput

func (PreventionPolicyMacCloudAntiMalwareArgs) ToPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext

func (i PreventionPolicyMacCloudAntiMalwareArgs) ToPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAntiMalwarePtrOutput

type PreventionPolicyMacCloudAntiMalwareInput

type PreventionPolicyMacCloudAntiMalwareInput interface {
	pulumi.Input

	ToPreventionPolicyMacCloudAntiMalwareOutput() PreventionPolicyMacCloudAntiMalwareOutput
	ToPreventionPolicyMacCloudAntiMalwareOutputWithContext(context.Context) PreventionPolicyMacCloudAntiMalwareOutput
}

PreventionPolicyMacCloudAntiMalwareInput is an input type that accepts PreventionPolicyMacCloudAntiMalwareArgs and PreventionPolicyMacCloudAntiMalwareOutput values. You can construct a concrete instance of `PreventionPolicyMacCloudAntiMalwareInput` via:

PreventionPolicyMacCloudAntiMalwareArgs{...}

type PreventionPolicyMacCloudAntiMalwareOutput

type PreventionPolicyMacCloudAntiMalwareOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacCloudAntiMalwareOutput) Detection

Machine learning level for detection.

func (PreventionPolicyMacCloudAntiMalwareOutput) ElementType

func (PreventionPolicyMacCloudAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyMacCloudAntiMalwareOutput) ToPreventionPolicyMacCloudAntiMalwareOutput

func (o PreventionPolicyMacCloudAntiMalwareOutput) ToPreventionPolicyMacCloudAntiMalwareOutput() PreventionPolicyMacCloudAntiMalwareOutput

func (PreventionPolicyMacCloudAntiMalwareOutput) ToPreventionPolicyMacCloudAntiMalwareOutputWithContext

func (o PreventionPolicyMacCloudAntiMalwareOutput) ToPreventionPolicyMacCloudAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAntiMalwareOutput

func (PreventionPolicyMacCloudAntiMalwareOutput) ToPreventionPolicyMacCloudAntiMalwarePtrOutput

func (o PreventionPolicyMacCloudAntiMalwareOutput) ToPreventionPolicyMacCloudAntiMalwarePtrOutput() PreventionPolicyMacCloudAntiMalwarePtrOutput

func (PreventionPolicyMacCloudAntiMalwareOutput) ToPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext

func (o PreventionPolicyMacCloudAntiMalwareOutput) ToPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAntiMalwarePtrOutput

type PreventionPolicyMacCloudAntiMalwarePtrInput

type PreventionPolicyMacCloudAntiMalwarePtrInput interface {
	pulumi.Input

	ToPreventionPolicyMacCloudAntiMalwarePtrOutput() PreventionPolicyMacCloudAntiMalwarePtrOutput
	ToPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext(context.Context) PreventionPolicyMacCloudAntiMalwarePtrOutput
}

PreventionPolicyMacCloudAntiMalwarePtrInput is an input type that accepts PreventionPolicyMacCloudAntiMalwareArgs, PreventionPolicyMacCloudAntiMalwarePtr and PreventionPolicyMacCloudAntiMalwarePtrOutput values. You can construct a concrete instance of `PreventionPolicyMacCloudAntiMalwarePtrInput` via:

        PreventionPolicyMacCloudAntiMalwareArgs{...}

or:

        nil

type PreventionPolicyMacCloudAntiMalwarePtrOutput

type PreventionPolicyMacCloudAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacCloudAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyMacCloudAntiMalwarePtrOutput) Elem

func (PreventionPolicyMacCloudAntiMalwarePtrOutput) ElementType

func (PreventionPolicyMacCloudAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyMacCloudAntiMalwarePtrOutput) ToPreventionPolicyMacCloudAntiMalwarePtrOutput

func (o PreventionPolicyMacCloudAntiMalwarePtrOutput) ToPreventionPolicyMacCloudAntiMalwarePtrOutput() PreventionPolicyMacCloudAntiMalwarePtrOutput

func (PreventionPolicyMacCloudAntiMalwarePtrOutput) ToPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext

func (o PreventionPolicyMacCloudAntiMalwarePtrOutput) ToPreventionPolicyMacCloudAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyMacCloudAntiMalwarePtrOutput

type PreventionPolicyMacInput

type PreventionPolicyMacInput interface {
	pulumi.Input

	ToPreventionPolicyMacOutput() PreventionPolicyMacOutput
	ToPreventionPolicyMacOutputWithContext(ctx context.Context) PreventionPolicyMacOutput
}

type PreventionPolicyMacMap

type PreventionPolicyMacMap map[string]PreventionPolicyMacInput

func (PreventionPolicyMacMap) ElementType

func (PreventionPolicyMacMap) ElementType() reflect.Type

func (PreventionPolicyMacMap) ToPreventionPolicyMacMapOutput

func (i PreventionPolicyMacMap) ToPreventionPolicyMacMapOutput() PreventionPolicyMacMapOutput

func (PreventionPolicyMacMap) ToPreventionPolicyMacMapOutputWithContext

func (i PreventionPolicyMacMap) ToPreventionPolicyMacMapOutputWithContext(ctx context.Context) PreventionPolicyMacMapOutput

type PreventionPolicyMacMapInput

type PreventionPolicyMacMapInput interface {
	pulumi.Input

	ToPreventionPolicyMacMapOutput() PreventionPolicyMacMapOutput
	ToPreventionPolicyMacMapOutputWithContext(context.Context) PreventionPolicyMacMapOutput
}

PreventionPolicyMacMapInput is an input type that accepts PreventionPolicyMacMap and PreventionPolicyMacMapOutput values. You can construct a concrete instance of `PreventionPolicyMacMapInput` via:

PreventionPolicyMacMap{ "key": PreventionPolicyMacArgs{...} }

type PreventionPolicyMacMapOutput

type PreventionPolicyMacMapOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacMapOutput) ElementType

func (PreventionPolicyMacMapOutput) MapIndex

func (PreventionPolicyMacMapOutput) ToPreventionPolicyMacMapOutput

func (o PreventionPolicyMacMapOutput) ToPreventionPolicyMacMapOutput() PreventionPolicyMacMapOutput

func (PreventionPolicyMacMapOutput) ToPreventionPolicyMacMapOutputWithContext

func (o PreventionPolicyMacMapOutput) ToPreventionPolicyMacMapOutputWithContext(ctx context.Context) PreventionPolicyMacMapOutput

type PreventionPolicyMacOutput

type PreventionPolicyMacOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacOutput) ChopperWebshell

func (o PreventionPolicyMacOutput) ChopperWebshell() pulumi.BoolOutput

Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.

func (PreventionPolicyMacOutput) CloudAdwareAndPup

Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.

func (PreventionPolicyMacOutput) CloudAntiMalware

Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.

func (PreventionPolicyMacOutput) CustomBlocking

func (o PreventionPolicyMacOutput) CustomBlocking() pulumi.BoolOutput

Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".

func (PreventionPolicyMacOutput) Description

Description of the prevention policy.

func (PreventionPolicyMacOutput) DetectOnWrite

func (o PreventionPolicyMacOutput) DetectOnWrite() pulumi.BoolOutput

Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.

func (PreventionPolicyMacOutput) ElementType

func (PreventionPolicyMacOutput) ElementType() reflect.Type

func (PreventionPolicyMacOutput) EmpyreBackdoor

func (o PreventionPolicyMacOutput) EmpyreBackdoor() pulumi.BoolOutput

Whether to enable the setting. A process with behaviors indicative of the Empyre Backdoor was terminated.

func (PreventionPolicyMacOutput) Enabled

Enable the prevention policy.

func (PreventionPolicyMacOutput) HashCollector

func (o PreventionPolicyMacOutput) HashCollector() pulumi.BoolOutput

Whether to enable the setting. An attempt to dump a user’s hashed password was blocked.

func (PreventionPolicyMacOutput) HostGroups

Host Group ids to attach to the prevention policy.

func (PreventionPolicyMacOutput) IntelligenceSourcedThreats

func (o PreventionPolicyMacOutput) IntelligenceSourcedThreats() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.

func (PreventionPolicyMacOutput) IoaRuleGroups

IOA Rule Group to attach to the prevention policy.

func (PreventionPolicyMacOutput) KcPasswordDecoded

func (o PreventionPolicyMacOutput) KcPasswordDecoded() pulumi.BoolOutput

Whether to enable the setting. An attempt to recover a plaintext password via the kcpassword file was blocked.

func (PreventionPolicyMacOutput) LastUpdated

func (PreventionPolicyMacOutput) Name

Name of the prevention policy.

func (PreventionPolicyMacOutput) NotifyEndUsers

func (o PreventionPolicyMacOutput) NotifyEndUsers() pulumi.BoolOutput

Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. See these messages in Console.app by searching for Process: Falcon Notifications.

func (PreventionPolicyMacOutput) PreventSuspiciousProcesses

func (o PreventionPolicyMacOutput) PreventSuspiciousProcesses() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.

func (PreventionPolicyMacOutput) Quarantine

Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.

func (PreventionPolicyMacOutput) QuarantineOnWrite

func (o PreventionPolicyMacOutput) QuarantineOnWrite() pulumi.BoolOutput

Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.

func (PreventionPolicyMacOutput) ScriptBasedExecutionMonitoring

func (o PreventionPolicyMacOutput) ScriptBasedExecutionMonitoring() pulumi.BoolOutput

Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.

func (PreventionPolicyMacOutput) SensorAdwareAndPup

For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent adware and potentially unwanted programs (PUP).

func (PreventionPolicyMacOutput) SensorAntiMalware

For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.

func (PreventionPolicyMacOutput) SensorTamperingProtection

func (o PreventionPolicyMacOutput) SensorTamperingProtection() pulumi.BoolOutput

Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.

func (PreventionPolicyMacOutput) ToPreventionPolicyMacOutput

func (o PreventionPolicyMacOutput) ToPreventionPolicyMacOutput() PreventionPolicyMacOutput

func (PreventionPolicyMacOutput) ToPreventionPolicyMacOutputWithContext

func (o PreventionPolicyMacOutput) ToPreventionPolicyMacOutputWithContext(ctx context.Context) PreventionPolicyMacOutput

func (PreventionPolicyMacOutput) UploadUnknownDetectionRelatedExecutables

func (o PreventionPolicyMacOutput) UploadUnknownDetectionRelatedExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.

func (PreventionPolicyMacOutput) UploadUnknownExecutables

func (o PreventionPolicyMacOutput) UploadUnknownExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.

func (PreventionPolicyMacOutput) XpcomShell

Whether to enable the setting. The execution of an XPCOM shell was blocked.

type PreventionPolicyMacSensorAdwareAndPup

type PreventionPolicyMacSensorAdwareAndPup struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyMacSensorAdwareAndPupArgs

type PreventionPolicyMacSensorAdwareAndPupArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyMacSensorAdwareAndPupArgs) ElementType

func (PreventionPolicyMacSensorAdwareAndPupArgs) ToPreventionPolicyMacSensorAdwareAndPupOutput

func (i PreventionPolicyMacSensorAdwareAndPupArgs) ToPreventionPolicyMacSensorAdwareAndPupOutput() PreventionPolicyMacSensorAdwareAndPupOutput

func (PreventionPolicyMacSensorAdwareAndPupArgs) ToPreventionPolicyMacSensorAdwareAndPupOutputWithContext

func (i PreventionPolicyMacSensorAdwareAndPupArgs) ToPreventionPolicyMacSensorAdwareAndPupOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAdwareAndPupOutput

func (PreventionPolicyMacSensorAdwareAndPupArgs) ToPreventionPolicyMacSensorAdwareAndPupPtrOutput

func (i PreventionPolicyMacSensorAdwareAndPupArgs) ToPreventionPolicyMacSensorAdwareAndPupPtrOutput() PreventionPolicyMacSensorAdwareAndPupPtrOutput

func (PreventionPolicyMacSensorAdwareAndPupArgs) ToPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext

func (i PreventionPolicyMacSensorAdwareAndPupArgs) ToPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAdwareAndPupPtrOutput

type PreventionPolicyMacSensorAdwareAndPupInput

type PreventionPolicyMacSensorAdwareAndPupInput interface {
	pulumi.Input

	ToPreventionPolicyMacSensorAdwareAndPupOutput() PreventionPolicyMacSensorAdwareAndPupOutput
	ToPreventionPolicyMacSensorAdwareAndPupOutputWithContext(context.Context) PreventionPolicyMacSensorAdwareAndPupOutput
}

PreventionPolicyMacSensorAdwareAndPupInput is an input type that accepts PreventionPolicyMacSensorAdwareAndPupArgs and PreventionPolicyMacSensorAdwareAndPupOutput values. You can construct a concrete instance of `PreventionPolicyMacSensorAdwareAndPupInput` via:

PreventionPolicyMacSensorAdwareAndPupArgs{...}

type PreventionPolicyMacSensorAdwareAndPupOutput

type PreventionPolicyMacSensorAdwareAndPupOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacSensorAdwareAndPupOutput) Detection

Machine learning level for detection.

func (PreventionPolicyMacSensorAdwareAndPupOutput) ElementType

func (PreventionPolicyMacSensorAdwareAndPupOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyMacSensorAdwareAndPupOutput) ToPreventionPolicyMacSensorAdwareAndPupOutput

func (o PreventionPolicyMacSensorAdwareAndPupOutput) ToPreventionPolicyMacSensorAdwareAndPupOutput() PreventionPolicyMacSensorAdwareAndPupOutput

func (PreventionPolicyMacSensorAdwareAndPupOutput) ToPreventionPolicyMacSensorAdwareAndPupOutputWithContext

func (o PreventionPolicyMacSensorAdwareAndPupOutput) ToPreventionPolicyMacSensorAdwareAndPupOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAdwareAndPupOutput

func (PreventionPolicyMacSensorAdwareAndPupOutput) ToPreventionPolicyMacSensorAdwareAndPupPtrOutput

func (o PreventionPolicyMacSensorAdwareAndPupOutput) ToPreventionPolicyMacSensorAdwareAndPupPtrOutput() PreventionPolicyMacSensorAdwareAndPupPtrOutput

func (PreventionPolicyMacSensorAdwareAndPupOutput) ToPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext

func (o PreventionPolicyMacSensorAdwareAndPupOutput) ToPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAdwareAndPupPtrOutput

type PreventionPolicyMacSensorAdwareAndPupPtrInput

type PreventionPolicyMacSensorAdwareAndPupPtrInput interface {
	pulumi.Input

	ToPreventionPolicyMacSensorAdwareAndPupPtrOutput() PreventionPolicyMacSensorAdwareAndPupPtrOutput
	ToPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext(context.Context) PreventionPolicyMacSensorAdwareAndPupPtrOutput
}

PreventionPolicyMacSensorAdwareAndPupPtrInput is an input type that accepts PreventionPolicyMacSensorAdwareAndPupArgs, PreventionPolicyMacSensorAdwareAndPupPtr and PreventionPolicyMacSensorAdwareAndPupPtrOutput values. You can construct a concrete instance of `PreventionPolicyMacSensorAdwareAndPupPtrInput` via:

        PreventionPolicyMacSensorAdwareAndPupArgs{...}

or:

        nil

type PreventionPolicyMacSensorAdwareAndPupPtrOutput

type PreventionPolicyMacSensorAdwareAndPupPtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacSensorAdwareAndPupPtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyMacSensorAdwareAndPupPtrOutput) Elem

func (PreventionPolicyMacSensorAdwareAndPupPtrOutput) ElementType

func (PreventionPolicyMacSensorAdwareAndPupPtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyMacSensorAdwareAndPupPtrOutput) ToPreventionPolicyMacSensorAdwareAndPupPtrOutput

func (o PreventionPolicyMacSensorAdwareAndPupPtrOutput) ToPreventionPolicyMacSensorAdwareAndPupPtrOutput() PreventionPolicyMacSensorAdwareAndPupPtrOutput

func (PreventionPolicyMacSensorAdwareAndPupPtrOutput) ToPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext

func (o PreventionPolicyMacSensorAdwareAndPupPtrOutput) ToPreventionPolicyMacSensorAdwareAndPupPtrOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAdwareAndPupPtrOutput

type PreventionPolicyMacSensorAntiMalware

type PreventionPolicyMacSensorAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyMacSensorAntiMalwareArgs

type PreventionPolicyMacSensorAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyMacSensorAntiMalwareArgs) ElementType

func (PreventionPolicyMacSensorAntiMalwareArgs) ToPreventionPolicyMacSensorAntiMalwareOutput

func (i PreventionPolicyMacSensorAntiMalwareArgs) ToPreventionPolicyMacSensorAntiMalwareOutput() PreventionPolicyMacSensorAntiMalwareOutput

func (PreventionPolicyMacSensorAntiMalwareArgs) ToPreventionPolicyMacSensorAntiMalwareOutputWithContext

func (i PreventionPolicyMacSensorAntiMalwareArgs) ToPreventionPolicyMacSensorAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAntiMalwareOutput

func (PreventionPolicyMacSensorAntiMalwareArgs) ToPreventionPolicyMacSensorAntiMalwarePtrOutput

func (i PreventionPolicyMacSensorAntiMalwareArgs) ToPreventionPolicyMacSensorAntiMalwarePtrOutput() PreventionPolicyMacSensorAntiMalwarePtrOutput

func (PreventionPolicyMacSensorAntiMalwareArgs) ToPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext

func (i PreventionPolicyMacSensorAntiMalwareArgs) ToPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAntiMalwarePtrOutput

type PreventionPolicyMacSensorAntiMalwareInput

type PreventionPolicyMacSensorAntiMalwareInput interface {
	pulumi.Input

	ToPreventionPolicyMacSensorAntiMalwareOutput() PreventionPolicyMacSensorAntiMalwareOutput
	ToPreventionPolicyMacSensorAntiMalwareOutputWithContext(context.Context) PreventionPolicyMacSensorAntiMalwareOutput
}

PreventionPolicyMacSensorAntiMalwareInput is an input type that accepts PreventionPolicyMacSensorAntiMalwareArgs and PreventionPolicyMacSensorAntiMalwareOutput values. You can construct a concrete instance of `PreventionPolicyMacSensorAntiMalwareInput` via:

PreventionPolicyMacSensorAntiMalwareArgs{...}

type PreventionPolicyMacSensorAntiMalwareOutput

type PreventionPolicyMacSensorAntiMalwareOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacSensorAntiMalwareOutput) Detection

Machine learning level for detection.

func (PreventionPolicyMacSensorAntiMalwareOutput) ElementType

func (PreventionPolicyMacSensorAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyMacSensorAntiMalwareOutput) ToPreventionPolicyMacSensorAntiMalwareOutput

func (o PreventionPolicyMacSensorAntiMalwareOutput) ToPreventionPolicyMacSensorAntiMalwareOutput() PreventionPolicyMacSensorAntiMalwareOutput

func (PreventionPolicyMacSensorAntiMalwareOutput) ToPreventionPolicyMacSensorAntiMalwareOutputWithContext

func (o PreventionPolicyMacSensorAntiMalwareOutput) ToPreventionPolicyMacSensorAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAntiMalwareOutput

func (PreventionPolicyMacSensorAntiMalwareOutput) ToPreventionPolicyMacSensorAntiMalwarePtrOutput

func (o PreventionPolicyMacSensorAntiMalwareOutput) ToPreventionPolicyMacSensorAntiMalwarePtrOutput() PreventionPolicyMacSensorAntiMalwarePtrOutput

func (PreventionPolicyMacSensorAntiMalwareOutput) ToPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext

func (o PreventionPolicyMacSensorAntiMalwareOutput) ToPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAntiMalwarePtrOutput

type PreventionPolicyMacSensorAntiMalwarePtrInput

type PreventionPolicyMacSensorAntiMalwarePtrInput interface {
	pulumi.Input

	ToPreventionPolicyMacSensorAntiMalwarePtrOutput() PreventionPolicyMacSensorAntiMalwarePtrOutput
	ToPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext(context.Context) PreventionPolicyMacSensorAntiMalwarePtrOutput
}

PreventionPolicyMacSensorAntiMalwarePtrInput is an input type that accepts PreventionPolicyMacSensorAntiMalwareArgs, PreventionPolicyMacSensorAntiMalwarePtr and PreventionPolicyMacSensorAntiMalwarePtrOutput values. You can construct a concrete instance of `PreventionPolicyMacSensorAntiMalwarePtrInput` via:

        PreventionPolicyMacSensorAntiMalwareArgs{...}

or:

        nil

type PreventionPolicyMacSensorAntiMalwarePtrOutput

type PreventionPolicyMacSensorAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyMacSensorAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyMacSensorAntiMalwarePtrOutput) Elem

func (PreventionPolicyMacSensorAntiMalwarePtrOutput) ElementType

func (PreventionPolicyMacSensorAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyMacSensorAntiMalwarePtrOutput) ToPreventionPolicyMacSensorAntiMalwarePtrOutput

func (o PreventionPolicyMacSensorAntiMalwarePtrOutput) ToPreventionPolicyMacSensorAntiMalwarePtrOutput() PreventionPolicyMacSensorAntiMalwarePtrOutput

func (PreventionPolicyMacSensorAntiMalwarePtrOutput) ToPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext

func (o PreventionPolicyMacSensorAntiMalwarePtrOutput) ToPreventionPolicyMacSensorAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyMacSensorAntiMalwarePtrOutput

type PreventionPolicyMacState

type PreventionPolicyMacState struct {
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	CloudAdwareAndPup PreventionPolicyMacCloudAdwareAndPupPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware PreventionPolicyMacCloudAntiMalwarePtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. A process with behaviors indicative of the Empyre Backdoor was terminated.
	EmpyreBackdoor pulumi.BoolPtrInput
	// Enable the prevention policy.
	Enabled pulumi.BoolPtrInput
	// Whether to enable the setting. An attempt to dump a user’s hashed password was blocked.
	HashCollector pulumi.BoolPtrInput
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayInput
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. An attempt to recover a plaintext password via the kcpassword file was blocked.
	KcPasswordDecoded pulumi.BoolPtrInput
	LastUpdated       pulumi.StringPtrInput
	// Name of the prevention policy.
	Name pulumi.StringPtrInput
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. See these messages in Console.app by searching for Process: Falcon Notifications.
	NotifyEndUsers pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions.
	Quarantine pulumi.BoolPtrInput
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent adware and potentially unwanted programs (PUP).
	SensorAdwareAndPup PreventionPolicyMacSensorAdwareAndPupPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware PreventionPolicyMacSensorAntiMalwarePtrInput
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. The execution of an XPCOM shell was blocked.
	XpcomShell pulumi.BoolPtrInput
}

func (PreventionPolicyMacState) ElementType

func (PreventionPolicyMacState) ElementType() reflect.Type

type PreventionPolicyPrecedence

type PreventionPolicyPrecedence struct {
	pulumi.CustomResourceState

	// The enforcement type for this resource. `strict` requires all non-default prevention policy ids for platform to be provided. `dynamic` will ensure the provided policies have precedence over others. When using dynamic, policy ids not included in `ids` will retain their current ordering after the managed ids.
	Enforcement pulumi.StringOutput `pulumi:"enforcement"`
	// The policy ids in order. The first ID specified will have the highest precedence and the last ID specified will have the lowest.
	Ids         pulumi.StringArrayOutput `pulumi:"ids"`
	LastUpdated pulumi.StringOutput      `pulumi:"lastUpdated"`
	// That platform of the prevention policies. (Windows, Mac, Linux)
	PlatformName pulumi.StringOutput `pulumi:"platformName"`
}

This resource allows you set the precedence of Prevention Policies based on the order of IDs.

## API Scopes

The following API scopes are required:

- Prevention policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := crowdstrike.NewPreventionPolicyPrecedence(ctx, "example", &crowdstrike.PreventionPolicyPrecedenceArgs{
			Ids: pulumi.StringArray{
				pulumi.String("a1j09y3yq0wnrpb5o6jlij9e4f40k6lq"),
				pulumi.String("2asia54xti93bg0jbr5hfpqqbhxbyeoa"),
				pulumi.String("xuzq8hs1uyc2s7zdar3fli0shiyl22vc"),
			},
			PlatformName: pulumi.String("linux"),
			Enforcement:  pulumi.String("dynamic"),
		})
		if err != nil {
			return err
		}
		ctx.Export("preventionPolicyPrecedence", example)
		return nil
	})
}

```

func GetPreventionPolicyPrecedence

func GetPreventionPolicyPrecedence(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PreventionPolicyPrecedenceState, opts ...pulumi.ResourceOption) (*PreventionPolicyPrecedence, error)

GetPreventionPolicyPrecedence gets an existing PreventionPolicyPrecedence resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPreventionPolicyPrecedence

func NewPreventionPolicyPrecedence(ctx *pulumi.Context,
	name string, args *PreventionPolicyPrecedenceArgs, opts ...pulumi.ResourceOption) (*PreventionPolicyPrecedence, error)

NewPreventionPolicyPrecedence registers a new resource with the given unique name, arguments, and options.

func (*PreventionPolicyPrecedence) ElementType

func (*PreventionPolicyPrecedence) ElementType() reflect.Type

func (*PreventionPolicyPrecedence) ToPreventionPolicyPrecedenceOutput

func (i *PreventionPolicyPrecedence) ToPreventionPolicyPrecedenceOutput() PreventionPolicyPrecedenceOutput

func (*PreventionPolicyPrecedence) ToPreventionPolicyPrecedenceOutputWithContext

func (i *PreventionPolicyPrecedence) ToPreventionPolicyPrecedenceOutputWithContext(ctx context.Context) PreventionPolicyPrecedenceOutput

type PreventionPolicyPrecedenceArgs

type PreventionPolicyPrecedenceArgs struct {
	// The enforcement type for this resource. `strict` requires all non-default prevention policy ids for platform to be provided. `dynamic` will ensure the provided policies have precedence over others. When using dynamic, policy ids not included in `ids` will retain their current ordering after the managed ids.
	Enforcement pulumi.StringInput
	// The policy ids in order. The first ID specified will have the highest precedence and the last ID specified will have the lowest.
	Ids pulumi.StringArrayInput
	// That platform of the prevention policies. (Windows, Mac, Linux)
	PlatformName pulumi.StringInput
}

The set of arguments for constructing a PreventionPolicyPrecedence resource.

func (PreventionPolicyPrecedenceArgs) ElementType

type PreventionPolicyPrecedenceArray

type PreventionPolicyPrecedenceArray []PreventionPolicyPrecedenceInput

func (PreventionPolicyPrecedenceArray) ElementType

func (PreventionPolicyPrecedenceArray) ToPreventionPolicyPrecedenceArrayOutput

func (i PreventionPolicyPrecedenceArray) ToPreventionPolicyPrecedenceArrayOutput() PreventionPolicyPrecedenceArrayOutput

func (PreventionPolicyPrecedenceArray) ToPreventionPolicyPrecedenceArrayOutputWithContext

func (i PreventionPolicyPrecedenceArray) ToPreventionPolicyPrecedenceArrayOutputWithContext(ctx context.Context) PreventionPolicyPrecedenceArrayOutput

type PreventionPolicyPrecedenceArrayInput

type PreventionPolicyPrecedenceArrayInput interface {
	pulumi.Input

	ToPreventionPolicyPrecedenceArrayOutput() PreventionPolicyPrecedenceArrayOutput
	ToPreventionPolicyPrecedenceArrayOutputWithContext(context.Context) PreventionPolicyPrecedenceArrayOutput
}

PreventionPolicyPrecedenceArrayInput is an input type that accepts PreventionPolicyPrecedenceArray and PreventionPolicyPrecedenceArrayOutput values. You can construct a concrete instance of `PreventionPolicyPrecedenceArrayInput` via:

PreventionPolicyPrecedenceArray{ PreventionPolicyPrecedenceArgs{...} }

type PreventionPolicyPrecedenceArrayOutput

type PreventionPolicyPrecedenceArrayOutput struct{ *pulumi.OutputState }

func (PreventionPolicyPrecedenceArrayOutput) ElementType

func (PreventionPolicyPrecedenceArrayOutput) Index

func (PreventionPolicyPrecedenceArrayOutput) ToPreventionPolicyPrecedenceArrayOutput

func (o PreventionPolicyPrecedenceArrayOutput) ToPreventionPolicyPrecedenceArrayOutput() PreventionPolicyPrecedenceArrayOutput

func (PreventionPolicyPrecedenceArrayOutput) ToPreventionPolicyPrecedenceArrayOutputWithContext

func (o PreventionPolicyPrecedenceArrayOutput) ToPreventionPolicyPrecedenceArrayOutputWithContext(ctx context.Context) PreventionPolicyPrecedenceArrayOutput

type PreventionPolicyPrecedenceInput

type PreventionPolicyPrecedenceInput interface {
	pulumi.Input

	ToPreventionPolicyPrecedenceOutput() PreventionPolicyPrecedenceOutput
	ToPreventionPolicyPrecedenceOutputWithContext(ctx context.Context) PreventionPolicyPrecedenceOutput
}

type PreventionPolicyPrecedenceMap

type PreventionPolicyPrecedenceMap map[string]PreventionPolicyPrecedenceInput

func (PreventionPolicyPrecedenceMap) ElementType

func (PreventionPolicyPrecedenceMap) ToPreventionPolicyPrecedenceMapOutput

func (i PreventionPolicyPrecedenceMap) ToPreventionPolicyPrecedenceMapOutput() PreventionPolicyPrecedenceMapOutput

func (PreventionPolicyPrecedenceMap) ToPreventionPolicyPrecedenceMapOutputWithContext

func (i PreventionPolicyPrecedenceMap) ToPreventionPolicyPrecedenceMapOutputWithContext(ctx context.Context) PreventionPolicyPrecedenceMapOutput

type PreventionPolicyPrecedenceMapInput

type PreventionPolicyPrecedenceMapInput interface {
	pulumi.Input

	ToPreventionPolicyPrecedenceMapOutput() PreventionPolicyPrecedenceMapOutput
	ToPreventionPolicyPrecedenceMapOutputWithContext(context.Context) PreventionPolicyPrecedenceMapOutput
}

PreventionPolicyPrecedenceMapInput is an input type that accepts PreventionPolicyPrecedenceMap and PreventionPolicyPrecedenceMapOutput values. You can construct a concrete instance of `PreventionPolicyPrecedenceMapInput` via:

PreventionPolicyPrecedenceMap{ "key": PreventionPolicyPrecedenceArgs{...} }

type PreventionPolicyPrecedenceMapOutput

type PreventionPolicyPrecedenceMapOutput struct{ *pulumi.OutputState }

func (PreventionPolicyPrecedenceMapOutput) ElementType

func (PreventionPolicyPrecedenceMapOutput) MapIndex

func (PreventionPolicyPrecedenceMapOutput) ToPreventionPolicyPrecedenceMapOutput

func (o PreventionPolicyPrecedenceMapOutput) ToPreventionPolicyPrecedenceMapOutput() PreventionPolicyPrecedenceMapOutput

func (PreventionPolicyPrecedenceMapOutput) ToPreventionPolicyPrecedenceMapOutputWithContext

func (o PreventionPolicyPrecedenceMapOutput) ToPreventionPolicyPrecedenceMapOutputWithContext(ctx context.Context) PreventionPolicyPrecedenceMapOutput

type PreventionPolicyPrecedenceOutput

type PreventionPolicyPrecedenceOutput struct{ *pulumi.OutputState }

func (PreventionPolicyPrecedenceOutput) ElementType

func (PreventionPolicyPrecedenceOutput) Enforcement

The enforcement type for this resource. `strict` requires all non-default prevention policy ids for platform to be provided. `dynamic` will ensure the provided policies have precedence over others. When using dynamic, policy ids not included in `ids` will retain their current ordering after the managed ids.

func (PreventionPolicyPrecedenceOutput) Ids

The policy ids in order. The first ID specified will have the highest precedence and the last ID specified will have the lowest.

func (PreventionPolicyPrecedenceOutput) LastUpdated

func (PreventionPolicyPrecedenceOutput) PlatformName

That platform of the prevention policies. (Windows, Mac, Linux)

func (PreventionPolicyPrecedenceOutput) ToPreventionPolicyPrecedenceOutput

func (o PreventionPolicyPrecedenceOutput) ToPreventionPolicyPrecedenceOutput() PreventionPolicyPrecedenceOutput

func (PreventionPolicyPrecedenceOutput) ToPreventionPolicyPrecedenceOutputWithContext

func (o PreventionPolicyPrecedenceOutput) ToPreventionPolicyPrecedenceOutputWithContext(ctx context.Context) PreventionPolicyPrecedenceOutput

type PreventionPolicyPrecedenceState

type PreventionPolicyPrecedenceState struct {
	// The enforcement type for this resource. `strict` requires all non-default prevention policy ids for platform to be provided. `dynamic` will ensure the provided policies have precedence over others. When using dynamic, policy ids not included in `ids` will retain their current ordering after the managed ids.
	Enforcement pulumi.StringPtrInput
	// The policy ids in order. The first ID specified will have the highest precedence and the last ID specified will have the lowest.
	Ids         pulumi.StringArrayInput
	LastUpdated pulumi.StringPtrInput
	// That platform of the prevention policies. (Windows, Mac, Linux)
	PlatformName pulumi.StringPtrInput
}

func (PreventionPolicyPrecedenceState) ElementType

type PreventionPolicyWindows

type PreventionPolicyWindows struct {
	pulumi.CustomResourceState

	// Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	AdditionalUserModeData pulumi.BoolOutput `pulumi:"additionalUserModeData"`
	// Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.
	AdvancedRemediation pulumi.BoolOutput `pulumi:"advancedRemediation"`
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	AdwareAndPup PreventionPolicyWindowsAdwareAndPupOutput `pulumi:"adwareAndPup"`
	// Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.
	ApplicationExploitationActivity pulumi.BoolOutput `pulumi:"applicationExploitationActivity"`
	// Whether to enable the setting. Deletion of backups often indicative of ransomware activity.
	BackupDeletion pulumi.BoolOutput `pulumi:"backupDeletion"`
	// Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.
	BiosDeepVisibility pulumi.BoolOutput `pulumi:"biosDeepVisibility"`
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolOutput `pulumi:"chopperWebshell"`
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware PreventionPolicyWindowsCloudAntiMalwareOutput `pulumi:"cloudAntiMalware"`
	// Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	CloudAntiMalwareMicrosoftOfficeFiles PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput `pulumi:"cloudAntiMalwareMicrosoftOfficeFiles"`
	// For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.
	CloudAntiMalwareUserInitiated PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput `pulumi:"cloudAntiMalwareUserInitiated"`
	// Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional*user*mode_data to be enabled.
	CodeInjection pulumi.BoolOutput `pulumi:"codeInjection"`
	// Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional*user*mode_data to be enabled.
	CredentialDumping pulumi.BoolOutput `pulumi:"credentialDumping"`
	// Whether to enable the setting. A process associated with Cryptowall was blocked.
	Cryptowall pulumi.BoolOutput `pulumi:"cryptowall"`
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolOutput `pulumi:"customBlocking"`
	// Description of the prevention policy.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolOutput `pulumi:"detectOnWrite"`
	// Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.
	DriveByDownload pulumi.BoolOutput `pulumi:"driveByDownload"`
	// Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.
	DriverLoadPrevention pulumi.BoolOutput `pulumi:"driverLoadPrevention"`
	// Enable the prevention policy.
	Enabled pulumi.BoolOutput `pulumi:"enabled"`
	// Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreterOnly to be enabled.
	EngineFullVisibility pulumi.BoolOutput `pulumi:"engineFullVisibility"`
	// Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.
	EnhancedDllLoadVisibility pulumi.BoolOutput `pulumi:"enhancedDllLoadVisibility"`
	// Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.
	EnhancedExploitationVisibility pulumi.BoolOutput `pulumi:"enhancedExploitationVisibility"`
	// Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.
	EnhancedMlForLargerFiles pulumi.BoolOutput `pulumi:"enhancedMlForLargerFiles"`
	// Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	ExtendedUserModeData PreventionPolicyWindowsExtendedUserModeDataOutput `pulumi:"extendedUserModeData"`
	// Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.
	FileEncryption pulumi.BoolOutput `pulumi:"fileEncryption"`
	// Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.
	FileSystemAccess pulumi.BoolOutput `pulumi:"fileSystemAccess"`
	// Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity.  When disabled each user under active containment will be released and the File System Containment will enter a disabled mode
	FileSystemContainment pulumi.BoolOutput `pulumi:"fileSystemContainment"`
	// Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	ForceAslr pulumi.BoolOutput `pulumi:"forceAslr"`
	// Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional*user*mode_data to be enabled.
	ForceDep pulumi.BoolOutput `pulumi:"forceDep"`
	// Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.
	HardwareEnhancedExploitDetection pulumi.BoolOutput `pulumi:"hardwareEnhancedExploitDetection"`
	// Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	HeapSprayPreallocation pulumi.BoolOutput `pulumi:"heapSprayPreallocation"`
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayOutput `pulumi:"hostGroups"`
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.
	HttpDetections pulumi.BoolOutput `pulumi:"httpDetections"`
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolOutput `pulumi:"intelligenceSourcedThreats"`
	// Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.
	InterpreterOnly pulumi.BoolOutput `pulumi:"interpreterOnly"`
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayOutput `pulumi:"ioaRuleGroups"`
	// Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.
	JavascriptViaRundll32 pulumi.BoolOutput   `pulumi:"javascriptViaRundll32"`
	LastUpdated           pulumi.StringOutput `pulumi:"lastUpdated"`
	// Whether to enable the setting. A process determined to be associated with Locky was blocked.
	Locky pulumi.BoolOutput `pulumi:"locky"`
	// Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.
	MemoryScanning pulumi.BoolOutput `pulumi:"memoryScanning"`
	// Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.
	MemoryScanningScanWithCpu pulumi.BoolOutput `pulumi:"memoryScanningScanWithCpu"`
	// Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	MicrosoftOfficeFileSuspiciousMacroRemoval pulumi.BoolOutput `pulumi:"microsoftOfficeFileSuspiciousMacroRemoval"`
	// Name of the prevention policy.
	Name pulumi.StringOutput `pulumi:"name"`
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.
	NotifyEndUsers pulumi.BoolOutput `pulumi:"notifyEndUsers"`
	// Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	NullPageAllocation pulumi.BoolOutput `pulumi:"nullPageAllocation"`
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolOutput `pulumi:"onWriteScriptFileVisibility"`
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolOutput `pulumi:"preventSuspiciousProcesses"`
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.
	QuarantineAndSecurityCenterRegistration pulumi.BoolOutput `pulumi:"quarantineAndSecurityCenterRegistration"`
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.
	QuarantineOnRemovableMedia pulumi.BoolOutput `pulumi:"quarantineOnRemovableMedia"`
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolOutput `pulumi:"quarantineOnWrite"`
	// Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.
	RedactHttpDetectionDetails pulumi.BoolOutput `pulumi:"redactHttpDetectionDetails"`
	// Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.
	ScriptBasedExecutionMonitoring pulumi.BoolOutput `pulumi:"scriptBasedExecutionMonitoring"`
	// Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	SehOverwriteProtection pulumi.BoolOutput `pulumi:"sehOverwriteProtection"`
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware PreventionPolicyWindowsSensorAntiMalwareOutput `pulumi:"sensorAntiMalware"`
	// For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.
	SensorAntiMalwareUserInitiated PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput `pulumi:"sensorAntiMalwareUserInitiated"`
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolOutput `pulumi:"sensorTamperingProtection"`
	// Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.
	SuspiciousRegistryOperations pulumi.BoolOutput `pulumi:"suspiciousRegistryOperations"`
	// Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.
	SuspiciousScriptsAndCommands pulumi.BoolOutput `pulumi:"suspiciousScriptsAndCommands"`
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolOutput `pulumi:"uploadUnknownDetectionRelatedExecutables"`
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolOutput `pulumi:"uploadUnknownExecutables"`
	// Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.
	UsbInsertionTriggeredScan pulumi.BoolOutput `pulumi:"usbInsertionTriggeredScan"`
	// Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.
	VolumeShadowCopyAudit pulumi.BoolOutput `pulumi:"volumeShadowCopyAudit"`
	// Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume*shadow*copy_audit.
	VolumeShadowCopyProtect pulumi.BoolOutput `pulumi:"volumeShadowCopyProtect"`
	// Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver*load*prevention.
	VulnerableDriverProtection pulumi.BoolOutput `pulumi:"vulnerableDriverProtection"`
	// Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.
	WindowsLogonBypassStickyKeys pulumi.BoolOutput `pulumi:"windowsLogonBypassStickyKeys"`
}

This resource allows you to manage prevention policies for Windows hosts. Prevention policies allow you to manage what activity will trigger detections and preventions on your hosts.

## API Scopes

The following API scopes are required:

- Prevention policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := crowdstrike.NewPreventionPolicyWindows(ctx, "example", &crowdstrike.PreventionPolicyWindowsArgs{
			Enabled:       pulumi.Bool(true),
			Description:   pulumi.String("Made with Pulumi"),
			HostGroups:    pulumi.StringArray{},
			IoaRuleGroups: pulumi.StringArray{},
			AdwareAndPup: &crowdstrike.PreventionPolicyWindowsAdwareAndPupArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			CloudAntiMalwareMicrosoftOfficeFiles: &crowdstrike.PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("DISABLED"),
			},
			CloudAntiMalware: &crowdstrike.PreventionPolicyWindowsCloudAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			CloudAntiMalwareUserInitiated: &crowdstrike.PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAntiMalware: &crowdstrike.PreventionPolicyWindowsSensorAntiMalwareArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			SensorAntiMalwareUserInitiated: &crowdstrike.PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs{
				Detection:  pulumi.String("MODERATE"),
				Prevention: pulumi.String("CAUTIOUS"),
			},
			ExtendedUserModeData: &crowdstrike.PreventionPolicyWindowsExtendedUserModeDataArgs{
				Detection: pulumi.String("MODERATE"),
			},
			UsbInsertionTriggeredScan:                 pulumi.Bool(true),
			ApplicationExploitationActivity:           pulumi.Bool(true),
			AdditionalUserModeData:                    pulumi.Bool(true),
			NotifyEndUsers:                            pulumi.Bool(true),
			AdvancedRemediation:                       pulumi.Bool(true),
			BackupDeletion:                            pulumi.Bool(true),
			BiosDeepVisibility:                        pulumi.Bool(true),
			ChopperWebshell:                           pulumi.Bool(true),
			CodeInjection:                             pulumi.Bool(true),
			CredentialDumping:                         pulumi.Bool(true),
			Cryptowall:                                pulumi.Bool(true),
			CustomBlocking:                            pulumi.Bool(true),
			DetectOnWrite:                             pulumi.Bool(true),
			DriveByDownload:                           pulumi.Bool(true),
			DriverLoadPrevention:                      pulumi.Bool(true),
			InterpreterOnly:                           pulumi.Bool(true),
			EngineFullVisibility:                      pulumi.Bool(true),
			EnhancedExploitationVisibility:            pulumi.Bool(true),
			EnhancedDllLoadVisibility:                 pulumi.Bool(true),
			EnhancedMlForLargerFiles:                  pulumi.Bool(true),
			FileEncryption:                            pulumi.Bool(true),
			FileSystemAccess:                          pulumi.Bool(true),
			ForceAslr:                                 pulumi.Bool(true),
			ForceDep:                                  pulumi.Bool(true),
			HeapSprayPreallocation:                    pulumi.Bool(true),
			NullPageAllocation:                        pulumi.Bool(true),
			SehOverwriteProtection:                    pulumi.Bool(true),
			HardwareEnhancedExploitDetection:          pulumi.Bool(true),
			HttpDetections:                            pulumi.Bool(true),
			RedactHttpDetectionDetails:                pulumi.Bool(true),
			IntelligenceSourcedThreats:                pulumi.Bool(true),
			JavascriptViaRundll32:                     pulumi.Bool(true),
			Locky:                                     pulumi.Bool(true),
			MemoryScanning:                            pulumi.Bool(true),
			MemoryScanningScanWithCpu:                 pulumi.Bool(true),
			MicrosoftOfficeFileSuspiciousMacroRemoval: pulumi.Bool(true),
			OnWriteScriptFileVisibility:               pulumi.Bool(true),
			PreventSuspiciousProcesses:                pulumi.Bool(true),
			QuarantineAndSecurityCenterRegistration:   pulumi.Bool(true),
			QuarantineOnRemovableMedia:                pulumi.Bool(true),
			QuarantineOnWrite:                         pulumi.Bool(true),
			ScriptBasedExecutionMonitoring:            pulumi.Bool(true),
			SensorTamperingProtection:                 pulumi.Bool(true),
			SuspiciousRegistryOperations:              pulumi.Bool(true),
			SuspiciousScriptsAndCommands:              pulumi.Bool(true),
			UploadUnknownExecutables:                  pulumi.Bool(true),
			UploadUnknownDetectionRelatedExecutables:  pulumi.Bool(true),
			VolumeShadowCopyAudit:                     pulumi.Bool(true),
			VolumeShadowCopyProtect:                   pulumi.Bool(true),
			VulnerableDriverProtection:                pulumi.Bool(true),
			WindowsLogonBypassStickyKeys:              pulumi.Bool(true),
			FileSystemContainment:                     pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		ctx.Export("preventionPolicyWindows", example)
		return nil
	})
}

```

## Import

prevention policy can be imported by specifying the policy id.

```sh $ pulumi import crowdstrike:index/preventionPolicyWindows:PreventionPolicyWindows example 7fb858a949034a0cbca175f660f1e769 ```

func GetPreventionPolicyWindows

func GetPreventionPolicyWindows(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PreventionPolicyWindowsState, opts ...pulumi.ResourceOption) (*PreventionPolicyWindows, error)

GetPreventionPolicyWindows gets an existing PreventionPolicyWindows resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPreventionPolicyWindows

func NewPreventionPolicyWindows(ctx *pulumi.Context,
	name string, args *PreventionPolicyWindowsArgs, opts ...pulumi.ResourceOption) (*PreventionPolicyWindows, error)

NewPreventionPolicyWindows registers a new resource with the given unique name, arguments, and options.

func (*PreventionPolicyWindows) ElementType

func (*PreventionPolicyWindows) ElementType() reflect.Type

func (*PreventionPolicyWindows) ToPreventionPolicyWindowsOutput

func (i *PreventionPolicyWindows) ToPreventionPolicyWindowsOutput() PreventionPolicyWindowsOutput

func (*PreventionPolicyWindows) ToPreventionPolicyWindowsOutputWithContext

func (i *PreventionPolicyWindows) ToPreventionPolicyWindowsOutputWithContext(ctx context.Context) PreventionPolicyWindowsOutput

type PreventionPolicyWindowsAdwareAndPup

type PreventionPolicyWindowsAdwareAndPup struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyWindowsAdwareAndPupArgs

type PreventionPolicyWindowsAdwareAndPupArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyWindowsAdwareAndPupArgs) ElementType

func (PreventionPolicyWindowsAdwareAndPupArgs) ToPreventionPolicyWindowsAdwareAndPupOutput

func (i PreventionPolicyWindowsAdwareAndPupArgs) ToPreventionPolicyWindowsAdwareAndPupOutput() PreventionPolicyWindowsAdwareAndPupOutput

func (PreventionPolicyWindowsAdwareAndPupArgs) ToPreventionPolicyWindowsAdwareAndPupOutputWithContext

func (i PreventionPolicyWindowsAdwareAndPupArgs) ToPreventionPolicyWindowsAdwareAndPupOutputWithContext(ctx context.Context) PreventionPolicyWindowsAdwareAndPupOutput

func (PreventionPolicyWindowsAdwareAndPupArgs) ToPreventionPolicyWindowsAdwareAndPupPtrOutput

func (i PreventionPolicyWindowsAdwareAndPupArgs) ToPreventionPolicyWindowsAdwareAndPupPtrOutput() PreventionPolicyWindowsAdwareAndPupPtrOutput

func (PreventionPolicyWindowsAdwareAndPupArgs) ToPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext

func (i PreventionPolicyWindowsAdwareAndPupArgs) ToPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsAdwareAndPupPtrOutput

type PreventionPolicyWindowsAdwareAndPupInput

type PreventionPolicyWindowsAdwareAndPupInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsAdwareAndPupOutput() PreventionPolicyWindowsAdwareAndPupOutput
	ToPreventionPolicyWindowsAdwareAndPupOutputWithContext(context.Context) PreventionPolicyWindowsAdwareAndPupOutput
}

PreventionPolicyWindowsAdwareAndPupInput is an input type that accepts PreventionPolicyWindowsAdwareAndPupArgs and PreventionPolicyWindowsAdwareAndPupOutput values. You can construct a concrete instance of `PreventionPolicyWindowsAdwareAndPupInput` via:

PreventionPolicyWindowsAdwareAndPupArgs{...}

type PreventionPolicyWindowsAdwareAndPupOutput

type PreventionPolicyWindowsAdwareAndPupOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsAdwareAndPupOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsAdwareAndPupOutput) ElementType

func (PreventionPolicyWindowsAdwareAndPupOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsAdwareAndPupOutput) ToPreventionPolicyWindowsAdwareAndPupOutput

func (o PreventionPolicyWindowsAdwareAndPupOutput) ToPreventionPolicyWindowsAdwareAndPupOutput() PreventionPolicyWindowsAdwareAndPupOutput

func (PreventionPolicyWindowsAdwareAndPupOutput) ToPreventionPolicyWindowsAdwareAndPupOutputWithContext

func (o PreventionPolicyWindowsAdwareAndPupOutput) ToPreventionPolicyWindowsAdwareAndPupOutputWithContext(ctx context.Context) PreventionPolicyWindowsAdwareAndPupOutput

func (PreventionPolicyWindowsAdwareAndPupOutput) ToPreventionPolicyWindowsAdwareAndPupPtrOutput

func (o PreventionPolicyWindowsAdwareAndPupOutput) ToPreventionPolicyWindowsAdwareAndPupPtrOutput() PreventionPolicyWindowsAdwareAndPupPtrOutput

func (PreventionPolicyWindowsAdwareAndPupOutput) ToPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext

func (o PreventionPolicyWindowsAdwareAndPupOutput) ToPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsAdwareAndPupPtrOutput

type PreventionPolicyWindowsAdwareAndPupPtrInput

type PreventionPolicyWindowsAdwareAndPupPtrInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsAdwareAndPupPtrOutput() PreventionPolicyWindowsAdwareAndPupPtrOutput
	ToPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext(context.Context) PreventionPolicyWindowsAdwareAndPupPtrOutput
}

PreventionPolicyWindowsAdwareAndPupPtrInput is an input type that accepts PreventionPolicyWindowsAdwareAndPupArgs, PreventionPolicyWindowsAdwareAndPupPtr and PreventionPolicyWindowsAdwareAndPupPtrOutput values. You can construct a concrete instance of `PreventionPolicyWindowsAdwareAndPupPtrInput` via:

        PreventionPolicyWindowsAdwareAndPupArgs{...}

or:

        nil

type PreventionPolicyWindowsAdwareAndPupPtrOutput

type PreventionPolicyWindowsAdwareAndPupPtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsAdwareAndPupPtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsAdwareAndPupPtrOutput) Elem

func (PreventionPolicyWindowsAdwareAndPupPtrOutput) ElementType

func (PreventionPolicyWindowsAdwareAndPupPtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsAdwareAndPupPtrOutput) ToPreventionPolicyWindowsAdwareAndPupPtrOutput

func (o PreventionPolicyWindowsAdwareAndPupPtrOutput) ToPreventionPolicyWindowsAdwareAndPupPtrOutput() PreventionPolicyWindowsAdwareAndPupPtrOutput

func (PreventionPolicyWindowsAdwareAndPupPtrOutput) ToPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext

func (o PreventionPolicyWindowsAdwareAndPupPtrOutput) ToPreventionPolicyWindowsAdwareAndPupPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsAdwareAndPupPtrOutput

type PreventionPolicyWindowsArgs

type PreventionPolicyWindowsArgs struct {
	// Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	AdditionalUserModeData pulumi.BoolPtrInput
	// Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.
	AdvancedRemediation pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	AdwareAndPup PreventionPolicyWindowsAdwareAndPupPtrInput
	// Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.
	ApplicationExploitationActivity pulumi.BoolPtrInput
	// Whether to enable the setting. Deletion of backups often indicative of ransomware activity.
	BackupDeletion pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.
	BiosDeepVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware PreventionPolicyWindowsCloudAntiMalwarePtrInput
	// Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	CloudAntiMalwareMicrosoftOfficeFiles PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput
	// For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.
	CloudAntiMalwareUserInitiated PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput
	// Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional*user*mode_data to be enabled.
	CodeInjection pulumi.BoolPtrInput
	// Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional*user*mode_data to be enabled.
	CredentialDumping pulumi.BoolPtrInput
	// Whether to enable the setting. A process associated with Cryptowall was blocked.
	Cryptowall pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.
	DriveByDownload pulumi.BoolPtrInput
	// Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.
	DriverLoadPrevention pulumi.BoolPtrInput
	// Enable the prevention policy.
	Enabled pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreterOnly to be enabled.
	EngineFullVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.
	EnhancedDllLoadVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.
	EnhancedExploitationVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.
	EnhancedMlForLargerFiles pulumi.BoolPtrInput
	// Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	ExtendedUserModeData PreventionPolicyWindowsExtendedUserModeDataPtrInput
	// Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.
	FileEncryption pulumi.BoolPtrInput
	// Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.
	FileSystemAccess pulumi.BoolPtrInput
	// Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity.  When disabled each user under active containment will be released and the File System Containment will enter a disabled mode
	FileSystemContainment pulumi.BoolPtrInput
	// Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	ForceAslr pulumi.BoolPtrInput
	// Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional*user*mode_data to be enabled.
	ForceDep pulumi.BoolPtrInput
	// Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.
	HardwareEnhancedExploitDetection pulumi.BoolPtrInput
	// Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	HeapSprayPreallocation pulumi.BoolPtrInput
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.
	HttpDetections pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.
	InterpreterOnly pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.
	JavascriptViaRundll32 pulumi.BoolPtrInput
	// Whether to enable the setting. A process determined to be associated with Locky was blocked.
	Locky pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.
	MemoryScanning pulumi.BoolPtrInput
	// Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.
	MemoryScanningScanWithCpu pulumi.BoolPtrInput
	// Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	MicrosoftOfficeFileSuspiciousMacroRemoval pulumi.BoolPtrInput
	// Name of the prevention policy.
	Name pulumi.StringPtrInput
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.
	NotifyEndUsers pulumi.BoolPtrInput
	// Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	NullPageAllocation pulumi.BoolPtrInput
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.
	QuarantineAndSecurityCenterRegistration pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.
	QuarantineOnRemovableMedia pulumi.BoolPtrInput
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.
	RedactHttpDetectionDetails pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	SehOverwriteProtection pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware PreventionPolicyWindowsSensorAntiMalwarePtrInput
	// For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.
	SensorAntiMalwareUserInitiated PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.
	SuspiciousRegistryOperations pulumi.BoolPtrInput
	// Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.
	SuspiciousScriptsAndCommands pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.
	UsbInsertionTriggeredScan pulumi.BoolPtrInput
	// Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.
	VolumeShadowCopyAudit pulumi.BoolPtrInput
	// Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume*shadow*copy_audit.
	VolumeShadowCopyProtect pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver*load*prevention.
	VulnerableDriverProtection pulumi.BoolPtrInput
	// Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.
	WindowsLogonBypassStickyKeys pulumi.BoolPtrInput
}

The set of arguments for constructing a PreventionPolicyWindows resource.

func (PreventionPolicyWindowsArgs) ElementType

type PreventionPolicyWindowsArray

type PreventionPolicyWindowsArray []PreventionPolicyWindowsInput

func (PreventionPolicyWindowsArray) ElementType

func (PreventionPolicyWindowsArray) ToPreventionPolicyWindowsArrayOutput

func (i PreventionPolicyWindowsArray) ToPreventionPolicyWindowsArrayOutput() PreventionPolicyWindowsArrayOutput

func (PreventionPolicyWindowsArray) ToPreventionPolicyWindowsArrayOutputWithContext

func (i PreventionPolicyWindowsArray) ToPreventionPolicyWindowsArrayOutputWithContext(ctx context.Context) PreventionPolicyWindowsArrayOutput

type PreventionPolicyWindowsArrayInput

type PreventionPolicyWindowsArrayInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsArrayOutput() PreventionPolicyWindowsArrayOutput
	ToPreventionPolicyWindowsArrayOutputWithContext(context.Context) PreventionPolicyWindowsArrayOutput
}

PreventionPolicyWindowsArrayInput is an input type that accepts PreventionPolicyWindowsArray and PreventionPolicyWindowsArrayOutput values. You can construct a concrete instance of `PreventionPolicyWindowsArrayInput` via:

PreventionPolicyWindowsArray{ PreventionPolicyWindowsArgs{...} }

type PreventionPolicyWindowsArrayOutput

type PreventionPolicyWindowsArrayOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsArrayOutput) ElementType

func (PreventionPolicyWindowsArrayOutput) Index

func (PreventionPolicyWindowsArrayOutput) ToPreventionPolicyWindowsArrayOutput

func (o PreventionPolicyWindowsArrayOutput) ToPreventionPolicyWindowsArrayOutput() PreventionPolicyWindowsArrayOutput

func (PreventionPolicyWindowsArrayOutput) ToPreventionPolicyWindowsArrayOutputWithContext

func (o PreventionPolicyWindowsArrayOutput) ToPreventionPolicyWindowsArrayOutputWithContext(ctx context.Context) PreventionPolicyWindowsArrayOutput

type PreventionPolicyWindowsCloudAntiMalware

type PreventionPolicyWindowsCloudAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyWindowsCloudAntiMalwareArgs

type PreventionPolicyWindowsCloudAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyWindowsCloudAntiMalwareArgs) ElementType

func (PreventionPolicyWindowsCloudAntiMalwareArgs) ToPreventionPolicyWindowsCloudAntiMalwareOutput

func (i PreventionPolicyWindowsCloudAntiMalwareArgs) ToPreventionPolicyWindowsCloudAntiMalwareOutput() PreventionPolicyWindowsCloudAntiMalwareOutput

func (PreventionPolicyWindowsCloudAntiMalwareArgs) ToPreventionPolicyWindowsCloudAntiMalwareOutputWithContext

func (i PreventionPolicyWindowsCloudAntiMalwareArgs) ToPreventionPolicyWindowsCloudAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareOutput

func (PreventionPolicyWindowsCloudAntiMalwareArgs) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (i PreventionPolicyWindowsCloudAntiMalwareArgs) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutput() PreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (PreventionPolicyWindowsCloudAntiMalwareArgs) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext

func (i PreventionPolicyWindowsCloudAntiMalwareArgs) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwarePtrOutput

type PreventionPolicyWindowsCloudAntiMalwareInput

type PreventionPolicyWindowsCloudAntiMalwareInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsCloudAntiMalwareOutput() PreventionPolicyWindowsCloudAntiMalwareOutput
	ToPreventionPolicyWindowsCloudAntiMalwareOutputWithContext(context.Context) PreventionPolicyWindowsCloudAntiMalwareOutput
}

PreventionPolicyWindowsCloudAntiMalwareInput is an input type that accepts PreventionPolicyWindowsCloudAntiMalwareArgs and PreventionPolicyWindowsCloudAntiMalwareOutput values. You can construct a concrete instance of `PreventionPolicyWindowsCloudAntiMalwareInput` via:

PreventionPolicyWindowsCloudAntiMalwareArgs{...}

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ElementType

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputWithContext

func (i PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext

func (i PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesInput

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput() PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput
	ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputWithContext(context.Context) PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput
}

PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesInput is an input type that accepts PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs and PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput values. You can construct a concrete instance of `PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesInput` via:

PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs{...}

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ElementType

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputWithContext

func (o PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext

func (o PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutput) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput() PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput
	ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext(context.Context) PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput
}

PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput is an input type that accepts PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs, PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtr and PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput values. You can construct a concrete instance of `PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput` via:

        PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesArgs{...}

or:

        nil

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

type PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) Elem

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) ElementType

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

func (PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext

func (o PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput) ToPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrOutput

type PreventionPolicyWindowsCloudAntiMalwareOutput

type PreventionPolicyWindowsCloudAntiMalwareOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsCloudAntiMalwareOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsCloudAntiMalwareOutput) ElementType

func (PreventionPolicyWindowsCloudAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsCloudAntiMalwareOutput) ToPreventionPolicyWindowsCloudAntiMalwareOutput

func (o PreventionPolicyWindowsCloudAntiMalwareOutput) ToPreventionPolicyWindowsCloudAntiMalwareOutput() PreventionPolicyWindowsCloudAntiMalwareOutput

func (PreventionPolicyWindowsCloudAntiMalwareOutput) ToPreventionPolicyWindowsCloudAntiMalwareOutputWithContext

func (o PreventionPolicyWindowsCloudAntiMalwareOutput) ToPreventionPolicyWindowsCloudAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareOutput

func (PreventionPolicyWindowsCloudAntiMalwareOutput) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (o PreventionPolicyWindowsCloudAntiMalwareOutput) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutput() PreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (PreventionPolicyWindowsCloudAntiMalwareOutput) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext

func (o PreventionPolicyWindowsCloudAntiMalwareOutput) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwarePtrOutput

type PreventionPolicyWindowsCloudAntiMalwarePtrInput

type PreventionPolicyWindowsCloudAntiMalwarePtrInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsCloudAntiMalwarePtrOutput() PreventionPolicyWindowsCloudAntiMalwarePtrOutput
	ToPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext(context.Context) PreventionPolicyWindowsCloudAntiMalwarePtrOutput
}

PreventionPolicyWindowsCloudAntiMalwarePtrInput is an input type that accepts PreventionPolicyWindowsCloudAntiMalwareArgs, PreventionPolicyWindowsCloudAntiMalwarePtr and PreventionPolicyWindowsCloudAntiMalwarePtrOutput values. You can construct a concrete instance of `PreventionPolicyWindowsCloudAntiMalwarePtrInput` via:

        PreventionPolicyWindowsCloudAntiMalwareArgs{...}

or:

        nil

type PreventionPolicyWindowsCloudAntiMalwarePtrOutput

type PreventionPolicyWindowsCloudAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsCloudAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsCloudAntiMalwarePtrOutput) Elem

func (PreventionPolicyWindowsCloudAntiMalwarePtrOutput) ElementType

func (PreventionPolicyWindowsCloudAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsCloudAntiMalwarePtrOutput) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (o PreventionPolicyWindowsCloudAntiMalwarePtrOutput) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutput() PreventionPolicyWindowsCloudAntiMalwarePtrOutput

func (PreventionPolicyWindowsCloudAntiMalwarePtrOutput) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext

func (o PreventionPolicyWindowsCloudAntiMalwarePtrOutput) ToPreventionPolicyWindowsCloudAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwarePtrOutput

type PreventionPolicyWindowsCloudAntiMalwareUserInitiated

type PreventionPolicyWindowsCloudAntiMalwareUserInitiated struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ElementType

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext

func (i PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

func (i PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput() PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext

func (i PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedInput

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput() PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput
	ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext(context.Context) PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput
}

PreventionPolicyWindowsCloudAntiMalwareUserInitiatedInput is an input type that accepts PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs and PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput values. You can construct a concrete instance of `PreventionPolicyWindowsCloudAntiMalwareUserInitiatedInput` via:

PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs{...}

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ElementType

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext

func (o PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext

func (o PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput() PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput
	ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext(context.Context) PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput
}

PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput is an input type that accepts PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs, PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtr and PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput values. You can construct a concrete instance of `PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput` via:

        PreventionPolicyWindowsCloudAntiMalwareUserInitiatedArgs{...}

or:

        nil

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

type PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) Elem

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) ElementType

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

func (PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext

func (o PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput) ToPreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrOutput

type PreventionPolicyWindowsExtendedUserModeData

type PreventionPolicyWindowsExtendedUserModeData struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
}

type PreventionPolicyWindowsExtendedUserModeDataArgs

type PreventionPolicyWindowsExtendedUserModeDataArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
}

func (PreventionPolicyWindowsExtendedUserModeDataArgs) ElementType

func (PreventionPolicyWindowsExtendedUserModeDataArgs) ToPreventionPolicyWindowsExtendedUserModeDataOutput

func (i PreventionPolicyWindowsExtendedUserModeDataArgs) ToPreventionPolicyWindowsExtendedUserModeDataOutput() PreventionPolicyWindowsExtendedUserModeDataOutput

func (PreventionPolicyWindowsExtendedUserModeDataArgs) ToPreventionPolicyWindowsExtendedUserModeDataOutputWithContext

func (i PreventionPolicyWindowsExtendedUserModeDataArgs) ToPreventionPolicyWindowsExtendedUserModeDataOutputWithContext(ctx context.Context) PreventionPolicyWindowsExtendedUserModeDataOutput

func (PreventionPolicyWindowsExtendedUserModeDataArgs) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutput

func (i PreventionPolicyWindowsExtendedUserModeDataArgs) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutput() PreventionPolicyWindowsExtendedUserModeDataPtrOutput

func (PreventionPolicyWindowsExtendedUserModeDataArgs) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext

func (i PreventionPolicyWindowsExtendedUserModeDataArgs) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsExtendedUserModeDataPtrOutput

type PreventionPolicyWindowsExtendedUserModeDataInput

type PreventionPolicyWindowsExtendedUserModeDataInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsExtendedUserModeDataOutput() PreventionPolicyWindowsExtendedUserModeDataOutput
	ToPreventionPolicyWindowsExtendedUserModeDataOutputWithContext(context.Context) PreventionPolicyWindowsExtendedUserModeDataOutput
}

PreventionPolicyWindowsExtendedUserModeDataInput is an input type that accepts PreventionPolicyWindowsExtendedUserModeDataArgs and PreventionPolicyWindowsExtendedUserModeDataOutput values. You can construct a concrete instance of `PreventionPolicyWindowsExtendedUserModeDataInput` via:

PreventionPolicyWindowsExtendedUserModeDataArgs{...}

type PreventionPolicyWindowsExtendedUserModeDataOutput

type PreventionPolicyWindowsExtendedUserModeDataOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsExtendedUserModeDataOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsExtendedUserModeDataOutput) ElementType

func (PreventionPolicyWindowsExtendedUserModeDataOutput) ToPreventionPolicyWindowsExtendedUserModeDataOutput

func (o PreventionPolicyWindowsExtendedUserModeDataOutput) ToPreventionPolicyWindowsExtendedUserModeDataOutput() PreventionPolicyWindowsExtendedUserModeDataOutput

func (PreventionPolicyWindowsExtendedUserModeDataOutput) ToPreventionPolicyWindowsExtendedUserModeDataOutputWithContext

func (o PreventionPolicyWindowsExtendedUserModeDataOutput) ToPreventionPolicyWindowsExtendedUserModeDataOutputWithContext(ctx context.Context) PreventionPolicyWindowsExtendedUserModeDataOutput

func (PreventionPolicyWindowsExtendedUserModeDataOutput) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutput

func (o PreventionPolicyWindowsExtendedUserModeDataOutput) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutput() PreventionPolicyWindowsExtendedUserModeDataPtrOutput

func (PreventionPolicyWindowsExtendedUserModeDataOutput) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext

func (o PreventionPolicyWindowsExtendedUserModeDataOutput) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsExtendedUserModeDataPtrOutput

type PreventionPolicyWindowsExtendedUserModeDataPtrInput

type PreventionPolicyWindowsExtendedUserModeDataPtrInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsExtendedUserModeDataPtrOutput() PreventionPolicyWindowsExtendedUserModeDataPtrOutput
	ToPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext(context.Context) PreventionPolicyWindowsExtendedUserModeDataPtrOutput
}

PreventionPolicyWindowsExtendedUserModeDataPtrInput is an input type that accepts PreventionPolicyWindowsExtendedUserModeDataArgs, PreventionPolicyWindowsExtendedUserModeDataPtr and PreventionPolicyWindowsExtendedUserModeDataPtrOutput values. You can construct a concrete instance of `PreventionPolicyWindowsExtendedUserModeDataPtrInput` via:

        PreventionPolicyWindowsExtendedUserModeDataArgs{...}

or:

        nil

type PreventionPolicyWindowsExtendedUserModeDataPtrOutput

type PreventionPolicyWindowsExtendedUserModeDataPtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsExtendedUserModeDataPtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsExtendedUserModeDataPtrOutput) Elem

func (PreventionPolicyWindowsExtendedUserModeDataPtrOutput) ElementType

func (PreventionPolicyWindowsExtendedUserModeDataPtrOutput) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutput

func (PreventionPolicyWindowsExtendedUserModeDataPtrOutput) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext

func (o PreventionPolicyWindowsExtendedUserModeDataPtrOutput) ToPreventionPolicyWindowsExtendedUserModeDataPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsExtendedUserModeDataPtrOutput

type PreventionPolicyWindowsInput

type PreventionPolicyWindowsInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsOutput() PreventionPolicyWindowsOutput
	ToPreventionPolicyWindowsOutputWithContext(ctx context.Context) PreventionPolicyWindowsOutput
}

type PreventionPolicyWindowsMap

type PreventionPolicyWindowsMap map[string]PreventionPolicyWindowsInput

func (PreventionPolicyWindowsMap) ElementType

func (PreventionPolicyWindowsMap) ElementType() reflect.Type

func (PreventionPolicyWindowsMap) ToPreventionPolicyWindowsMapOutput

func (i PreventionPolicyWindowsMap) ToPreventionPolicyWindowsMapOutput() PreventionPolicyWindowsMapOutput

func (PreventionPolicyWindowsMap) ToPreventionPolicyWindowsMapOutputWithContext

func (i PreventionPolicyWindowsMap) ToPreventionPolicyWindowsMapOutputWithContext(ctx context.Context) PreventionPolicyWindowsMapOutput

type PreventionPolicyWindowsMapInput

type PreventionPolicyWindowsMapInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsMapOutput() PreventionPolicyWindowsMapOutput
	ToPreventionPolicyWindowsMapOutputWithContext(context.Context) PreventionPolicyWindowsMapOutput
}

PreventionPolicyWindowsMapInput is an input type that accepts PreventionPolicyWindowsMap and PreventionPolicyWindowsMapOutput values. You can construct a concrete instance of `PreventionPolicyWindowsMapInput` via:

PreventionPolicyWindowsMap{ "key": PreventionPolicyWindowsArgs{...} }

type PreventionPolicyWindowsMapOutput

type PreventionPolicyWindowsMapOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsMapOutput) ElementType

func (PreventionPolicyWindowsMapOutput) MapIndex

func (PreventionPolicyWindowsMapOutput) ToPreventionPolicyWindowsMapOutput

func (o PreventionPolicyWindowsMapOutput) ToPreventionPolicyWindowsMapOutput() PreventionPolicyWindowsMapOutput

func (PreventionPolicyWindowsMapOutput) ToPreventionPolicyWindowsMapOutputWithContext

func (o PreventionPolicyWindowsMapOutput) ToPreventionPolicyWindowsMapOutputWithContext(ctx context.Context) PreventionPolicyWindowsMapOutput

type PreventionPolicyWindowsOutput

type PreventionPolicyWindowsOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsOutput) AdditionalUserModeData

func (o PreventionPolicyWindowsOutput) AdditionalUserModeData() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.

func (PreventionPolicyWindowsOutput) AdvancedRemediation

func (o PreventionPolicyWindowsOutput) AdvancedRemediation() pulumi.BoolOutput

Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.

func (PreventionPolicyWindowsOutput) AdwareAndPup

Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.

func (PreventionPolicyWindowsOutput) ApplicationExploitationActivity

func (o PreventionPolicyWindowsOutput) ApplicationExploitationActivity() pulumi.BoolOutput

Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.

func (PreventionPolicyWindowsOutput) BackupDeletion

func (o PreventionPolicyWindowsOutput) BackupDeletion() pulumi.BoolOutput

Whether to enable the setting. Deletion of backups often indicative of ransomware activity.

func (PreventionPolicyWindowsOutput) BiosDeepVisibility

func (o PreventionPolicyWindowsOutput) BiosDeepVisibility() pulumi.BoolOutput

Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.

func (PreventionPolicyWindowsOutput) ChopperWebshell

func (o PreventionPolicyWindowsOutput) ChopperWebshell() pulumi.BoolOutput

Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.

func (PreventionPolicyWindowsOutput) CloudAntiMalware

Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.

func (PreventionPolicyWindowsOutput) CloudAntiMalwareMicrosoftOfficeFiles

Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host

func (PreventionPolicyWindowsOutput) CloudAntiMalwareUserInitiated

For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.

func (PreventionPolicyWindowsOutput) CodeInjection

Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional*user*mode_data to be enabled.

func (PreventionPolicyWindowsOutput) CredentialDumping

func (o PreventionPolicyWindowsOutput) CredentialDumping() pulumi.BoolOutput

Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional*user*mode_data to be enabled.

func (PreventionPolicyWindowsOutput) Cryptowall

Whether to enable the setting. A process associated with Cryptowall was blocked.

func (PreventionPolicyWindowsOutput) CustomBlocking

func (o PreventionPolicyWindowsOutput) CustomBlocking() pulumi.BoolOutput

Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".

func (PreventionPolicyWindowsOutput) Description

Description of the prevention policy.

func (PreventionPolicyWindowsOutput) DetectOnWrite

Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.

func (PreventionPolicyWindowsOutput) DriveByDownload

func (o PreventionPolicyWindowsOutput) DriveByDownload() pulumi.BoolOutput

Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.

func (PreventionPolicyWindowsOutput) DriverLoadPrevention

func (o PreventionPolicyWindowsOutput) DriverLoadPrevention() pulumi.BoolOutput

Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.

func (PreventionPolicyWindowsOutput) ElementType

func (PreventionPolicyWindowsOutput) Enabled

Enable the prevention policy.

func (PreventionPolicyWindowsOutput) EngineFullVisibility

func (o PreventionPolicyWindowsOutput) EngineFullVisibility() pulumi.BoolOutput

Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreterOnly to be enabled.

func (PreventionPolicyWindowsOutput) EnhancedDllLoadVisibility

func (o PreventionPolicyWindowsOutput) EnhancedDllLoadVisibility() pulumi.BoolOutput

Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.

func (PreventionPolicyWindowsOutput) EnhancedExploitationVisibility

func (o PreventionPolicyWindowsOutput) EnhancedExploitationVisibility() pulumi.BoolOutput

Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.

func (PreventionPolicyWindowsOutput) EnhancedMlForLargerFiles

func (o PreventionPolicyWindowsOutput) EnhancedMlForLargerFiles() pulumi.BoolOutput

Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.

func (PreventionPolicyWindowsOutput) ExtendedUserModeData

Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.

func (PreventionPolicyWindowsOutput) FileEncryption

func (o PreventionPolicyWindowsOutput) FileEncryption() pulumi.BoolOutput

Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.

func (PreventionPolicyWindowsOutput) FileSystemAccess

func (o PreventionPolicyWindowsOutput) FileSystemAccess() pulumi.BoolOutput

Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.

func (PreventionPolicyWindowsOutput) FileSystemContainment

func (o PreventionPolicyWindowsOutput) FileSystemContainment() pulumi.BoolOutput

Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity. When disabled each user under active containment will be released and the File System Containment will enter a disabled mode

func (PreventionPolicyWindowsOutput) ForceAslr

Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.

func (PreventionPolicyWindowsOutput) ForceDep

Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional*user*mode_data to be enabled.

func (PreventionPolicyWindowsOutput) HardwareEnhancedExploitDetection

func (o PreventionPolicyWindowsOutput) HardwareEnhancedExploitDetection() pulumi.BoolOutput

Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.

func (PreventionPolicyWindowsOutput) HeapSprayPreallocation

func (o PreventionPolicyWindowsOutput) HeapSprayPreallocation() pulumi.BoolOutput

Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.

func (PreventionPolicyWindowsOutput) HostGroups

Host Group ids to attach to the prevention policy.

func (PreventionPolicyWindowsOutput) HttpDetections

func (o PreventionPolicyWindowsOutput) HttpDetections() pulumi.BoolOutput

Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.

func (PreventionPolicyWindowsOutput) IntelligenceSourcedThreats

func (o PreventionPolicyWindowsOutput) IntelligenceSourcedThreats() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.

func (PreventionPolicyWindowsOutput) InterpreterOnly

func (o PreventionPolicyWindowsOutput) InterpreterOnly() pulumi.BoolOutput

Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.

func (PreventionPolicyWindowsOutput) IoaRuleGroups

IOA Rule Group to attach to the prevention policy.

func (PreventionPolicyWindowsOutput) JavascriptViaRundll32

func (o PreventionPolicyWindowsOutput) JavascriptViaRundll32() pulumi.BoolOutput

Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.

func (PreventionPolicyWindowsOutput) LastUpdated

func (PreventionPolicyWindowsOutput) Locky

Whether to enable the setting. A process determined to be associated with Locky was blocked.

func (PreventionPolicyWindowsOutput) MemoryScanning

func (o PreventionPolicyWindowsOutput) MemoryScanning() pulumi.BoolOutput

Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.

func (PreventionPolicyWindowsOutput) MemoryScanningScanWithCpu

func (o PreventionPolicyWindowsOutput) MemoryScanningScanWithCpu() pulumi.BoolOutput

Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.

func (PreventionPolicyWindowsOutput) MicrosoftOfficeFileSuspiciousMacroRemoval

func (o PreventionPolicyWindowsOutput) MicrosoftOfficeFileSuspiciousMacroRemoval() pulumi.BoolOutput

Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host

func (PreventionPolicyWindowsOutput) Name

Name of the prevention policy.

func (PreventionPolicyWindowsOutput) NotifyEndUsers

func (o PreventionPolicyWindowsOutput) NotifyEndUsers() pulumi.BoolOutput

Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.

func (PreventionPolicyWindowsOutput) NullPageAllocation

func (o PreventionPolicyWindowsOutput) NullPageAllocation() pulumi.BoolOutput

Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.

func (PreventionPolicyWindowsOutput) OnWriteScriptFileVisibility

func (o PreventionPolicyWindowsOutput) OnWriteScriptFileVisibility() pulumi.BoolOutput

Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.

func (PreventionPolicyWindowsOutput) PreventSuspiciousProcesses

func (o PreventionPolicyWindowsOutput) PreventSuspiciousProcesses() pulumi.BoolOutput

Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.

func (PreventionPolicyWindowsOutput) QuarantineAndSecurityCenterRegistration

func (o PreventionPolicyWindowsOutput) QuarantineAndSecurityCenterRegistration() pulumi.BoolOutput

Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.

func (PreventionPolicyWindowsOutput) QuarantineOnRemovableMedia

func (o PreventionPolicyWindowsOutput) QuarantineOnRemovableMedia() pulumi.BoolOutput

Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.

func (PreventionPolicyWindowsOutput) QuarantineOnWrite

func (o PreventionPolicyWindowsOutput) QuarantineOnWrite() pulumi.BoolOutput

Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.

func (PreventionPolicyWindowsOutput) RedactHttpDetectionDetails

func (o PreventionPolicyWindowsOutput) RedactHttpDetectionDetails() pulumi.BoolOutput

Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.

func (PreventionPolicyWindowsOutput) ScriptBasedExecutionMonitoring

func (o PreventionPolicyWindowsOutput) ScriptBasedExecutionMonitoring() pulumi.BoolOutput

Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.

func (PreventionPolicyWindowsOutput) SehOverwriteProtection

func (o PreventionPolicyWindowsOutput) SehOverwriteProtection() pulumi.BoolOutput

Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.

func (PreventionPolicyWindowsOutput) SensorAntiMalware

For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.

func (PreventionPolicyWindowsOutput) SensorAntiMalwareUserInitiated

For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.

func (PreventionPolicyWindowsOutput) SensorTamperingProtection

func (o PreventionPolicyWindowsOutput) SensorTamperingProtection() pulumi.BoolOutput

Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.

func (PreventionPolicyWindowsOutput) SuspiciousRegistryOperations

func (o PreventionPolicyWindowsOutput) SuspiciousRegistryOperations() pulumi.BoolOutput

Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.

func (PreventionPolicyWindowsOutput) SuspiciousScriptsAndCommands

func (o PreventionPolicyWindowsOutput) SuspiciousScriptsAndCommands() pulumi.BoolOutput

Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.

func (PreventionPolicyWindowsOutput) ToPreventionPolicyWindowsOutput

func (o PreventionPolicyWindowsOutput) ToPreventionPolicyWindowsOutput() PreventionPolicyWindowsOutput

func (PreventionPolicyWindowsOutput) ToPreventionPolicyWindowsOutputWithContext

func (o PreventionPolicyWindowsOutput) ToPreventionPolicyWindowsOutputWithContext(ctx context.Context) PreventionPolicyWindowsOutput

func (PreventionPolicyWindowsOutput) UploadUnknownDetectionRelatedExecutables

func (o PreventionPolicyWindowsOutput) UploadUnknownDetectionRelatedExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.

func (PreventionPolicyWindowsOutput) UploadUnknownExecutables

func (o PreventionPolicyWindowsOutput) UploadUnknownExecutables() pulumi.BoolOutput

Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.

func (PreventionPolicyWindowsOutput) UsbInsertionTriggeredScan

func (o PreventionPolicyWindowsOutput) UsbInsertionTriggeredScan() pulumi.BoolOutput

Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.

func (PreventionPolicyWindowsOutput) VolumeShadowCopyAudit

func (o PreventionPolicyWindowsOutput) VolumeShadowCopyAudit() pulumi.BoolOutput

Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.

func (PreventionPolicyWindowsOutput) VolumeShadowCopyProtect

func (o PreventionPolicyWindowsOutput) VolumeShadowCopyProtect() pulumi.BoolOutput

Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume*shadow*copy_audit.

func (PreventionPolicyWindowsOutput) VulnerableDriverProtection

func (o PreventionPolicyWindowsOutput) VulnerableDriverProtection() pulumi.BoolOutput

Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver*load*prevention.

func (PreventionPolicyWindowsOutput) WindowsLogonBypassStickyKeys

func (o PreventionPolicyWindowsOutput) WindowsLogonBypassStickyKeys() pulumi.BoolOutput

Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.

type PreventionPolicyWindowsSensorAntiMalware

type PreventionPolicyWindowsSensorAntiMalware struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyWindowsSensorAntiMalwareArgs

type PreventionPolicyWindowsSensorAntiMalwareArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyWindowsSensorAntiMalwareArgs) ElementType

func (PreventionPolicyWindowsSensorAntiMalwareArgs) ToPreventionPolicyWindowsSensorAntiMalwareOutput

func (i PreventionPolicyWindowsSensorAntiMalwareArgs) ToPreventionPolicyWindowsSensorAntiMalwareOutput() PreventionPolicyWindowsSensorAntiMalwareOutput

func (PreventionPolicyWindowsSensorAntiMalwareArgs) ToPreventionPolicyWindowsSensorAntiMalwareOutputWithContext

func (i PreventionPolicyWindowsSensorAntiMalwareArgs) ToPreventionPolicyWindowsSensorAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwareOutput

func (PreventionPolicyWindowsSensorAntiMalwareArgs) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (i PreventionPolicyWindowsSensorAntiMalwareArgs) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutput() PreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (PreventionPolicyWindowsSensorAntiMalwareArgs) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext

func (i PreventionPolicyWindowsSensorAntiMalwareArgs) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwarePtrOutput

type PreventionPolicyWindowsSensorAntiMalwareInput

type PreventionPolicyWindowsSensorAntiMalwareInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsSensorAntiMalwareOutput() PreventionPolicyWindowsSensorAntiMalwareOutput
	ToPreventionPolicyWindowsSensorAntiMalwareOutputWithContext(context.Context) PreventionPolicyWindowsSensorAntiMalwareOutput
}

PreventionPolicyWindowsSensorAntiMalwareInput is an input type that accepts PreventionPolicyWindowsSensorAntiMalwareArgs and PreventionPolicyWindowsSensorAntiMalwareOutput values. You can construct a concrete instance of `PreventionPolicyWindowsSensorAntiMalwareInput` via:

PreventionPolicyWindowsSensorAntiMalwareArgs{...}

type PreventionPolicyWindowsSensorAntiMalwareOutput

type PreventionPolicyWindowsSensorAntiMalwareOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsSensorAntiMalwareOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsSensorAntiMalwareOutput) ElementType

func (PreventionPolicyWindowsSensorAntiMalwareOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsSensorAntiMalwareOutput) ToPreventionPolicyWindowsSensorAntiMalwareOutput

func (o PreventionPolicyWindowsSensorAntiMalwareOutput) ToPreventionPolicyWindowsSensorAntiMalwareOutput() PreventionPolicyWindowsSensorAntiMalwareOutput

func (PreventionPolicyWindowsSensorAntiMalwareOutput) ToPreventionPolicyWindowsSensorAntiMalwareOutputWithContext

func (o PreventionPolicyWindowsSensorAntiMalwareOutput) ToPreventionPolicyWindowsSensorAntiMalwareOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwareOutput

func (PreventionPolicyWindowsSensorAntiMalwareOutput) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (o PreventionPolicyWindowsSensorAntiMalwareOutput) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutput() PreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (PreventionPolicyWindowsSensorAntiMalwareOutput) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext

func (o PreventionPolicyWindowsSensorAntiMalwareOutput) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwarePtrOutput

type PreventionPolicyWindowsSensorAntiMalwarePtrInput

type PreventionPolicyWindowsSensorAntiMalwarePtrInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsSensorAntiMalwarePtrOutput() PreventionPolicyWindowsSensorAntiMalwarePtrOutput
	ToPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext(context.Context) PreventionPolicyWindowsSensorAntiMalwarePtrOutput
}

PreventionPolicyWindowsSensorAntiMalwarePtrInput is an input type that accepts PreventionPolicyWindowsSensorAntiMalwareArgs, PreventionPolicyWindowsSensorAntiMalwarePtr and PreventionPolicyWindowsSensorAntiMalwarePtrOutput values. You can construct a concrete instance of `PreventionPolicyWindowsSensorAntiMalwarePtrInput` via:

        PreventionPolicyWindowsSensorAntiMalwareArgs{...}

or:

        nil

type PreventionPolicyWindowsSensorAntiMalwarePtrOutput

type PreventionPolicyWindowsSensorAntiMalwarePtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsSensorAntiMalwarePtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsSensorAntiMalwarePtrOutput) Elem

func (PreventionPolicyWindowsSensorAntiMalwarePtrOutput) ElementType

func (PreventionPolicyWindowsSensorAntiMalwarePtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsSensorAntiMalwarePtrOutput) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (o PreventionPolicyWindowsSensorAntiMalwarePtrOutput) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutput() PreventionPolicyWindowsSensorAntiMalwarePtrOutput

func (PreventionPolicyWindowsSensorAntiMalwarePtrOutput) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext

func (o PreventionPolicyWindowsSensorAntiMalwarePtrOutput) ToPreventionPolicyWindowsSensorAntiMalwarePtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwarePtrOutput

type PreventionPolicyWindowsSensorAntiMalwareUserInitiated

type PreventionPolicyWindowsSensorAntiMalwareUserInitiated struct {
	// Machine learning level for detection.
	Detection string `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention string `pulumi:"prevention"`
}

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs struct {
	// Machine learning level for detection.
	Detection pulumi.StringInput `pulumi:"detection"`
	// Machine learning level for prevention.
	Prevention pulumi.StringInput `pulumi:"prevention"`
}

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ElementType

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext

func (i PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext

func (i PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedInput

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput() PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput
	ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext(context.Context) PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput
}

PreventionPolicyWindowsSensorAntiMalwareUserInitiatedInput is an input type that accepts PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs and PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput values. You can construct a concrete instance of `PreventionPolicyWindowsSensorAntiMalwareUserInitiatedInput` via:

PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs{...}

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ElementType

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext

func (o PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext

func (o PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutput) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput interface {
	pulumi.Input

	ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput() PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput
	ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext(context.Context) PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput
}

PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput is an input type that accepts PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs, PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtr and PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput values. You can construct a concrete instance of `PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput` via:

        PreventionPolicyWindowsSensorAntiMalwareUserInitiatedArgs{...}

or:

        nil

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

type PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput struct{ *pulumi.OutputState }

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) Detection

Machine learning level for detection.

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) Elem

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) ElementType

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) Prevention

Machine learning level for prevention.

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

func (PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext

func (o PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput) ToPreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutputWithContext(ctx context.Context) PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrOutput

type PreventionPolicyWindowsState

type PreventionPolicyWindowsState struct {
	// Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	AdditionalUserModeData pulumi.BoolPtrInput
	// Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.
	AdvancedRemediation pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
	AdwareAndPup PreventionPolicyWindowsAdwareAndPupPtrInput
	// Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.
	ApplicationExploitationActivity pulumi.BoolPtrInput
	// Whether to enable the setting. Deletion of backups often indicative of ransomware activity.
	BackupDeletion pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.
	BiosDeepVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
	ChopperWebshell pulumi.BoolPtrInput
	// Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
	CloudAntiMalware PreventionPolicyWindowsCloudAntiMalwarePtrInput
	// Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	CloudAntiMalwareMicrosoftOfficeFiles PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesPtrInput
	// For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.
	CloudAntiMalwareUserInitiated PreventionPolicyWindowsCloudAntiMalwareUserInitiatedPtrInput
	// Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional*user*mode_data to be enabled.
	CodeInjection pulumi.BoolPtrInput
	// Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional*user*mode_data to be enabled.
	CredentialDumping pulumi.BoolPtrInput
	// Whether to enable the setting. A process associated with Cryptowall was blocked.
	Cryptowall pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
	CustomBlocking pulumi.BoolPtrInput
	// Description of the prevention policy.
	Description pulumi.StringPtrInput
	// Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
	DetectOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.
	DriveByDownload pulumi.BoolPtrInput
	// Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.
	DriverLoadPrevention pulumi.BoolPtrInput
	// Enable the prevention policy.
	Enabled pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreterOnly to be enabled.
	EngineFullVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.
	EnhancedDllLoadVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.
	EnhancedExploitationVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.
	EnhancedMlForLargerFiles pulumi.BoolPtrInput
	// Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
	ExtendedUserModeData PreventionPolicyWindowsExtendedUserModeDataPtrInput
	// Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.
	FileEncryption pulumi.BoolPtrInput
	// Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.
	FileSystemAccess pulumi.BoolPtrInput
	// Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity.  When disabled each user under active containment will be released and the File System Containment will enter a disabled mode
	FileSystemContainment pulumi.BoolPtrInput
	// Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	ForceAslr pulumi.BoolPtrInput
	// Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional*user*mode_data to be enabled.
	ForceDep pulumi.BoolPtrInput
	// Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.
	HardwareEnhancedExploitDetection pulumi.BoolPtrInput
	// Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	HeapSprayPreallocation pulumi.BoolPtrInput
	// Host Group ids to attach to the prevention policy.
	HostGroups pulumi.StringArrayInput
	// Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.
	HttpDetections pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
	IntelligenceSourcedThreats pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.
	InterpreterOnly pulumi.BoolPtrInput
	// IOA Rule Group to attach to the prevention policy.
	IoaRuleGroups pulumi.StringArrayInput
	// Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.
	JavascriptViaRundll32 pulumi.BoolPtrInput
	LastUpdated           pulumi.StringPtrInput
	// Whether to enable the setting. A process determined to be associated with Locky was blocked.
	Locky pulumi.BoolPtrInput
	// Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.
	MemoryScanning pulumi.BoolPtrInput
	// Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.
	MemoryScanningScanWithCpu pulumi.BoolPtrInput
	// Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
	MicrosoftOfficeFileSuspiciousMacroRemoval pulumi.BoolPtrInput
	// Name of the prevention policy.
	Name pulumi.StringPtrInput
	// Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.
	NotifyEndUsers pulumi.BoolPtrInput
	// Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	NullPageAllocation pulumi.BoolPtrInput
	// Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
	OnWriteScriptFileVisibility pulumi.BoolPtrInput
	// Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
	PreventSuspiciousProcesses pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.
	QuarantineAndSecurityCenterRegistration pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.
	QuarantineOnRemovableMedia pulumi.BoolPtrInput
	// Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
	QuarantineOnWrite pulumi.BoolPtrInput
	// Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.
	RedactHttpDetectionDetails pulumi.BoolPtrInput
	// Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.
	ScriptBasedExecutionMonitoring pulumi.BoolPtrInput
	// Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional*user*mode_data to be enabled.
	SehOverwriteProtection pulumi.BoolPtrInput
	// For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
	SensorAntiMalware PreventionPolicyWindowsSensorAntiMalwarePtrInput
	// For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.
	SensorAntiMalwareUserInitiated PreventionPolicyWindowsSensorAntiMalwareUserInitiatedPtrInput
	// Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
	SensorTamperingProtection pulumi.BoolPtrInput
	// Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.
	SuspiciousRegistryOperations pulumi.BoolPtrInput
	// Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.
	SuspiciousScriptsAndCommands pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
	UploadUnknownDetectionRelatedExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
	UploadUnknownExecutables pulumi.BoolPtrInput
	// Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.
	UsbInsertionTriggeredScan pulumi.BoolPtrInput
	// Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.
	VolumeShadowCopyAudit pulumi.BoolPtrInput
	// Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume*shadow*copy_audit.
	VolumeShadowCopyProtect pulumi.BoolPtrInput
	// Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver*load*prevention.
	VulnerableDriverProtection pulumi.BoolPtrInput
	// Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.
	WindowsLogonBypassStickyKeys pulumi.BoolPtrInput
}

func (PreventionPolicyWindowsState) ElementType

type Provider

type Provider struct {
	pulumi.ProviderResourceState

	// Falcon Client Id for authenticating to the CrowdStrike APIs. Will use FALCON_CLIENT_ID environment variable when left
	// blank.
	ClientId pulumi.StringPtrOutput `pulumi:"clientId"`
	// Falcon Client Secret used for authenticating to the CrowdStrike APIs. Will use FALCON_CLIENT_SECRET environment variable
	// when left blank.
	ClientSecret pulumi.StringPtrOutput `pulumi:"clientSecret"`
	// Falcon Cloud to authenticate to. Valid values are autodiscover, us-1, us-2, eu-1, us-gov-1. Will use FALCON_CLOUD
	// environment variable when left blank.
	Cloud pulumi.StringPtrOutput `pulumi:"cloud"`
	// For MSSP Master CIDs, optionally lock the token to act on behalf of this member CID
	MemberCid pulumi.StringPtrOutput `pulumi:"memberCid"`
}

The provider type for the crowdstrike package. By default, resources use package-wide configuration settings, however an explicit `Provider` instance may be created and passed during resource construction to achieve fine-grained programmatic control over provider settings. See the [documentation](https://www.pulumi.com/docs/reference/programming-model/#providers) for more information.

func NewProvider

func NewProvider(ctx *pulumi.Context,
	name string, args *ProviderArgs, opts ...pulumi.ResourceOption) (*Provider, error)

NewProvider registers a new resource with the given unique name, arguments, and options.

func (*Provider) ElementType

func (*Provider) ElementType() reflect.Type

func (*Provider) ToProviderOutput

func (i *Provider) ToProviderOutput() ProviderOutput

func (*Provider) ToProviderOutputWithContext

func (i *Provider) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

type ProviderArgs

type ProviderArgs struct {
	// Falcon Client Id for authenticating to the CrowdStrike APIs. Will use FALCON_CLIENT_ID environment variable when left
	// blank.
	ClientId pulumi.StringPtrInput
	// Falcon Client Secret used for authenticating to the CrowdStrike APIs. Will use FALCON_CLIENT_SECRET environment variable
	// when left blank.
	ClientSecret pulumi.StringPtrInput
	// Falcon Cloud to authenticate to. Valid values are autodiscover, us-1, us-2, eu-1, us-gov-1. Will use FALCON_CLOUD
	// environment variable when left blank.
	Cloud pulumi.StringPtrInput
	// For MSSP Master CIDs, optionally lock the token to act on behalf of this member CID
	MemberCid pulumi.StringPtrInput
}

The set of arguments for constructing a Provider resource.

func (ProviderArgs) ElementType

func (ProviderArgs) ElementType() reflect.Type

type ProviderInput

type ProviderInput interface {
	pulumi.Input

	ToProviderOutput() ProviderOutput
	ToProviderOutputWithContext(ctx context.Context) ProviderOutput
}

type ProviderOutput

type ProviderOutput struct{ *pulumi.OutputState }

func (ProviderOutput) ClientId

func (o ProviderOutput) ClientId() pulumi.StringPtrOutput

Falcon Client Id for authenticating to the CrowdStrike APIs. Will use FALCON_CLIENT_ID environment variable when left blank.

func (ProviderOutput) ClientSecret

func (o ProviderOutput) ClientSecret() pulumi.StringPtrOutput

Falcon Client Secret used for authenticating to the CrowdStrike APIs. Will use FALCON_CLIENT_SECRET environment variable when left blank.

func (ProviderOutput) Cloud

Falcon Cloud to authenticate to. Valid values are autodiscover, us-1, us-2, eu-1, us-gov-1. Will use FALCON_CLOUD environment variable when left blank.

func (ProviderOutput) ElementType

func (ProviderOutput) ElementType() reflect.Type

func (ProviderOutput) MemberCid

func (o ProviderOutput) MemberCid() pulumi.StringPtrOutput

For MSSP Master CIDs, optionally lock the token to act on behalf of this member CID

func (ProviderOutput) ToProviderOutput

func (o ProviderOutput) ToProviderOutput() ProviderOutput

func (ProviderOutput) ToProviderOutputWithContext

func (o ProviderOutput) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

type SensorUpdatePolicy

type SensorUpdatePolicy struct {
	pulumi.CustomResourceState

	// Sensor build to use for the sensor update policy.
	Build pulumi.StringOutput `pulumi:"build"`
	// Sensor arm64 build to use for the sensor update policy (Linux only). Required if platformName is Linux.
	BuildArm64 pulumi.StringPtrOutput `pulumi:"buildArm64"`
	// Description of the sensor update policy.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Enable the sensor update policy.
	Enabled pulumi.BoolOutput `pulumi:"enabled"`
	// Host Group ids to attach to the sensor update policy.
	HostGroups  pulumi.StringArrayOutput `pulumi:"hostGroups"`
	LastUpdated pulumi.StringOutput      `pulumi:"lastUpdated"`
	// Name of the sensor update policy.
	Name pulumi.StringOutput `pulumi:"name"`
	// Platform for the sensor update policy to manage. (Windows, Mac, Linux)
	PlatformName pulumi.StringOutput `pulumi:"platformName"`
	// Prohibit sensor updates during a set of time blocks.
	Schedule SensorUpdatePolicyScheduleOutput `pulumi:"schedule"`
	// Enable uninstall protection. Windows and Mac only.
	UninstallProtection pulumi.BoolOutput `pulumi:"uninstallProtection"`
}

This resource allows management of sensor update policies in the CrowdStrike Falcon platform. Sensor update policies allow you to control the update process across a set of hosts.

## API Scopes

The following API scopes are required:

- Sensor update policies | Read & Write

## Import

sensor update policies can be imported by specifying the policy id.

```sh $ pulumi import crowdstrike:index/sensorUpdatePolicy:SensorUpdatePolicy example 7fb858a949034a0cbca175f660f1e769 ```

func GetSensorUpdatePolicy

func GetSensorUpdatePolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SensorUpdatePolicyState, opts ...pulumi.ResourceOption) (*SensorUpdatePolicy, error)

GetSensorUpdatePolicy gets an existing SensorUpdatePolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSensorUpdatePolicy

func NewSensorUpdatePolicy(ctx *pulumi.Context,
	name string, args *SensorUpdatePolicyArgs, opts ...pulumi.ResourceOption) (*SensorUpdatePolicy, error)

NewSensorUpdatePolicy registers a new resource with the given unique name, arguments, and options.

func (*SensorUpdatePolicy) ElementType

func (*SensorUpdatePolicy) ElementType() reflect.Type

func (*SensorUpdatePolicy) ToSensorUpdatePolicyOutput

func (i *SensorUpdatePolicy) ToSensorUpdatePolicyOutput() SensorUpdatePolicyOutput

func (*SensorUpdatePolicy) ToSensorUpdatePolicyOutputWithContext

func (i *SensorUpdatePolicy) ToSensorUpdatePolicyOutputWithContext(ctx context.Context) SensorUpdatePolicyOutput

type SensorUpdatePolicyArgs

type SensorUpdatePolicyArgs struct {
	// Sensor build to use for the sensor update policy.
	Build pulumi.StringInput
	// Sensor arm64 build to use for the sensor update policy (Linux only). Required if platformName is Linux.
	BuildArm64 pulumi.StringPtrInput
	// Description of the sensor update policy.
	Description pulumi.StringPtrInput
	// Enable the sensor update policy.
	Enabled pulumi.BoolPtrInput
	// Host Group ids to attach to the sensor update policy.
	HostGroups pulumi.StringArrayInput
	// Name of the sensor update policy.
	Name pulumi.StringPtrInput
	// Platform for the sensor update policy to manage. (Windows, Mac, Linux)
	PlatformName pulumi.StringInput
	// Prohibit sensor updates during a set of time blocks.
	Schedule SensorUpdatePolicyScheduleInput
	// Enable uninstall protection. Windows and Mac only.
	UninstallProtection pulumi.BoolPtrInput
}

The set of arguments for constructing a SensorUpdatePolicy resource.

func (SensorUpdatePolicyArgs) ElementType

func (SensorUpdatePolicyArgs) ElementType() reflect.Type

type SensorUpdatePolicyArray

type SensorUpdatePolicyArray []SensorUpdatePolicyInput

func (SensorUpdatePolicyArray) ElementType

func (SensorUpdatePolicyArray) ElementType() reflect.Type

func (SensorUpdatePolicyArray) ToSensorUpdatePolicyArrayOutput

func (i SensorUpdatePolicyArray) ToSensorUpdatePolicyArrayOutput() SensorUpdatePolicyArrayOutput

func (SensorUpdatePolicyArray) ToSensorUpdatePolicyArrayOutputWithContext

func (i SensorUpdatePolicyArray) ToSensorUpdatePolicyArrayOutputWithContext(ctx context.Context) SensorUpdatePolicyArrayOutput

type SensorUpdatePolicyArrayInput

type SensorUpdatePolicyArrayInput interface {
	pulumi.Input

	ToSensorUpdatePolicyArrayOutput() SensorUpdatePolicyArrayOutput
	ToSensorUpdatePolicyArrayOutputWithContext(context.Context) SensorUpdatePolicyArrayOutput
}

SensorUpdatePolicyArrayInput is an input type that accepts SensorUpdatePolicyArray and SensorUpdatePolicyArrayOutput values. You can construct a concrete instance of `SensorUpdatePolicyArrayInput` via:

SensorUpdatePolicyArray{ SensorUpdatePolicyArgs{...} }

type SensorUpdatePolicyArrayOutput

type SensorUpdatePolicyArrayOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyArrayOutput) ElementType

func (SensorUpdatePolicyArrayOutput) Index

func (SensorUpdatePolicyArrayOutput) ToSensorUpdatePolicyArrayOutput

func (o SensorUpdatePolicyArrayOutput) ToSensorUpdatePolicyArrayOutput() SensorUpdatePolicyArrayOutput

func (SensorUpdatePolicyArrayOutput) ToSensorUpdatePolicyArrayOutputWithContext

func (o SensorUpdatePolicyArrayOutput) ToSensorUpdatePolicyArrayOutputWithContext(ctx context.Context) SensorUpdatePolicyArrayOutput

type SensorUpdatePolicyHostGroupAttachment

type SensorUpdatePolicyHostGroupAttachment struct {
	pulumi.CustomResourceState

	// Host Group ids to attach to the sensor update policy.
	HostGroups pulumi.StringArrayOutput `pulumi:"hostGroups"`
	// The sensor update policy id you want to attach to.
	IdProperty  pulumi.StringOutput `pulumi:"idProperty"`
	LastUpdated pulumi.StringOutput `pulumi:"lastUpdated"`
}

This resource allows managing the host groups attached to a sensor update policy. This resource takes exclusive ownership over the host groups assigned to a sensor update policy. If you want to fully create or manage a sensor update policy please use the `sensorUpdatePolicy` resource.

## API Scopes

The following API scopes are required:

- Sensor update policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := crowdstrike.NewSensorUpdatePolicyHostGroupAttachment(ctx, "example", &crowdstrike.SensorUpdatePolicyHostGroupAttachmentArgs{
			IdProperty: pulumi.String("34ef8e65eb1b4642861e389da3f7e82f"),
			HostGroups: pulumi.StringArray{
				pulumi.String("ff1ca3nfr7899j1abf61c0448db28be5"),
			},
		})
		if err != nil {
			return err
		}
		ctx.Export("sensorUpdatePolicyHostGroupAttachment", example)
		return nil
	})
}

```

## Import

Sensor Update Policy Host Group Attachment can be imported by specifying the id.

```sh $ pulumi import crowdstrike:index/sensorUpdatePolicyHostGroupAttachment:SensorUpdatePolicyHostGroupAttachment example 7fb858a949034a0cbca175f660f1e769 ```

func GetSensorUpdatePolicyHostGroupAttachment

func GetSensorUpdatePolicyHostGroupAttachment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SensorUpdatePolicyHostGroupAttachmentState, opts ...pulumi.ResourceOption) (*SensorUpdatePolicyHostGroupAttachment, error)

GetSensorUpdatePolicyHostGroupAttachment gets an existing SensorUpdatePolicyHostGroupAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSensorUpdatePolicyHostGroupAttachment

func NewSensorUpdatePolicyHostGroupAttachment(ctx *pulumi.Context,
	name string, args *SensorUpdatePolicyHostGroupAttachmentArgs, opts ...pulumi.ResourceOption) (*SensorUpdatePolicyHostGroupAttachment, error)

NewSensorUpdatePolicyHostGroupAttachment registers a new resource with the given unique name, arguments, and options.

func (*SensorUpdatePolicyHostGroupAttachment) ElementType

func (*SensorUpdatePolicyHostGroupAttachment) ToSensorUpdatePolicyHostGroupAttachmentOutput

func (i *SensorUpdatePolicyHostGroupAttachment) ToSensorUpdatePolicyHostGroupAttachmentOutput() SensorUpdatePolicyHostGroupAttachmentOutput

func (*SensorUpdatePolicyHostGroupAttachment) ToSensorUpdatePolicyHostGroupAttachmentOutputWithContext

func (i *SensorUpdatePolicyHostGroupAttachment) ToSensorUpdatePolicyHostGroupAttachmentOutputWithContext(ctx context.Context) SensorUpdatePolicyHostGroupAttachmentOutput

type SensorUpdatePolicyHostGroupAttachmentArgs

type SensorUpdatePolicyHostGroupAttachmentArgs struct {
	// Host Group ids to attach to the sensor update policy.
	HostGroups pulumi.StringArrayInput
	// The sensor update policy id you want to attach to.
	IdProperty pulumi.StringInput
}

The set of arguments for constructing a SensorUpdatePolicyHostGroupAttachment resource.

func (SensorUpdatePolicyHostGroupAttachmentArgs) ElementType

type SensorUpdatePolicyHostGroupAttachmentArray

type SensorUpdatePolicyHostGroupAttachmentArray []SensorUpdatePolicyHostGroupAttachmentInput

func (SensorUpdatePolicyHostGroupAttachmentArray) ElementType

func (SensorUpdatePolicyHostGroupAttachmentArray) ToSensorUpdatePolicyHostGroupAttachmentArrayOutput

func (i SensorUpdatePolicyHostGroupAttachmentArray) ToSensorUpdatePolicyHostGroupAttachmentArrayOutput() SensorUpdatePolicyHostGroupAttachmentArrayOutput

func (SensorUpdatePolicyHostGroupAttachmentArray) ToSensorUpdatePolicyHostGroupAttachmentArrayOutputWithContext

func (i SensorUpdatePolicyHostGroupAttachmentArray) ToSensorUpdatePolicyHostGroupAttachmentArrayOutputWithContext(ctx context.Context) SensorUpdatePolicyHostGroupAttachmentArrayOutput

type SensorUpdatePolicyHostGroupAttachmentArrayInput

type SensorUpdatePolicyHostGroupAttachmentArrayInput interface {
	pulumi.Input

	ToSensorUpdatePolicyHostGroupAttachmentArrayOutput() SensorUpdatePolicyHostGroupAttachmentArrayOutput
	ToSensorUpdatePolicyHostGroupAttachmentArrayOutputWithContext(context.Context) SensorUpdatePolicyHostGroupAttachmentArrayOutput
}

SensorUpdatePolicyHostGroupAttachmentArrayInput is an input type that accepts SensorUpdatePolicyHostGroupAttachmentArray and SensorUpdatePolicyHostGroupAttachmentArrayOutput values. You can construct a concrete instance of `SensorUpdatePolicyHostGroupAttachmentArrayInput` via:

SensorUpdatePolicyHostGroupAttachmentArray{ SensorUpdatePolicyHostGroupAttachmentArgs{...} }

type SensorUpdatePolicyHostGroupAttachmentArrayOutput

type SensorUpdatePolicyHostGroupAttachmentArrayOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyHostGroupAttachmentArrayOutput) ElementType

func (SensorUpdatePolicyHostGroupAttachmentArrayOutput) Index

func (SensorUpdatePolicyHostGroupAttachmentArrayOutput) ToSensorUpdatePolicyHostGroupAttachmentArrayOutput

func (o SensorUpdatePolicyHostGroupAttachmentArrayOutput) ToSensorUpdatePolicyHostGroupAttachmentArrayOutput() SensorUpdatePolicyHostGroupAttachmentArrayOutput

func (SensorUpdatePolicyHostGroupAttachmentArrayOutput) ToSensorUpdatePolicyHostGroupAttachmentArrayOutputWithContext

func (o SensorUpdatePolicyHostGroupAttachmentArrayOutput) ToSensorUpdatePolicyHostGroupAttachmentArrayOutputWithContext(ctx context.Context) SensorUpdatePolicyHostGroupAttachmentArrayOutput

type SensorUpdatePolicyHostGroupAttachmentInput

type SensorUpdatePolicyHostGroupAttachmentInput interface {
	pulumi.Input

	ToSensorUpdatePolicyHostGroupAttachmentOutput() SensorUpdatePolicyHostGroupAttachmentOutput
	ToSensorUpdatePolicyHostGroupAttachmentOutputWithContext(ctx context.Context) SensorUpdatePolicyHostGroupAttachmentOutput
}

type SensorUpdatePolicyHostGroupAttachmentMap

type SensorUpdatePolicyHostGroupAttachmentMap map[string]SensorUpdatePolicyHostGroupAttachmentInput

func (SensorUpdatePolicyHostGroupAttachmentMap) ElementType

func (SensorUpdatePolicyHostGroupAttachmentMap) ToSensorUpdatePolicyHostGroupAttachmentMapOutput

func (i SensorUpdatePolicyHostGroupAttachmentMap) ToSensorUpdatePolicyHostGroupAttachmentMapOutput() SensorUpdatePolicyHostGroupAttachmentMapOutput

func (SensorUpdatePolicyHostGroupAttachmentMap) ToSensorUpdatePolicyHostGroupAttachmentMapOutputWithContext

func (i SensorUpdatePolicyHostGroupAttachmentMap) ToSensorUpdatePolicyHostGroupAttachmentMapOutputWithContext(ctx context.Context) SensorUpdatePolicyHostGroupAttachmentMapOutput

type SensorUpdatePolicyHostGroupAttachmentMapInput

type SensorUpdatePolicyHostGroupAttachmentMapInput interface {
	pulumi.Input

	ToSensorUpdatePolicyHostGroupAttachmentMapOutput() SensorUpdatePolicyHostGroupAttachmentMapOutput
	ToSensorUpdatePolicyHostGroupAttachmentMapOutputWithContext(context.Context) SensorUpdatePolicyHostGroupAttachmentMapOutput
}

SensorUpdatePolicyHostGroupAttachmentMapInput is an input type that accepts SensorUpdatePolicyHostGroupAttachmentMap and SensorUpdatePolicyHostGroupAttachmentMapOutput values. You can construct a concrete instance of `SensorUpdatePolicyHostGroupAttachmentMapInput` via:

SensorUpdatePolicyHostGroupAttachmentMap{ "key": SensorUpdatePolicyHostGroupAttachmentArgs{...} }

type SensorUpdatePolicyHostGroupAttachmentMapOutput

type SensorUpdatePolicyHostGroupAttachmentMapOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyHostGroupAttachmentMapOutput) ElementType

func (SensorUpdatePolicyHostGroupAttachmentMapOutput) MapIndex

func (SensorUpdatePolicyHostGroupAttachmentMapOutput) ToSensorUpdatePolicyHostGroupAttachmentMapOutput

func (o SensorUpdatePolicyHostGroupAttachmentMapOutput) ToSensorUpdatePolicyHostGroupAttachmentMapOutput() SensorUpdatePolicyHostGroupAttachmentMapOutput

func (SensorUpdatePolicyHostGroupAttachmentMapOutput) ToSensorUpdatePolicyHostGroupAttachmentMapOutputWithContext

func (o SensorUpdatePolicyHostGroupAttachmentMapOutput) ToSensorUpdatePolicyHostGroupAttachmentMapOutputWithContext(ctx context.Context) SensorUpdatePolicyHostGroupAttachmentMapOutput

type SensorUpdatePolicyHostGroupAttachmentOutput

type SensorUpdatePolicyHostGroupAttachmentOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyHostGroupAttachmentOutput) ElementType

func (SensorUpdatePolicyHostGroupAttachmentOutput) HostGroups

Host Group ids to attach to the sensor update policy.

func (SensorUpdatePolicyHostGroupAttachmentOutput) IdProperty

The sensor update policy id you want to attach to.

func (SensorUpdatePolicyHostGroupAttachmentOutput) LastUpdated

func (SensorUpdatePolicyHostGroupAttachmentOutput) ToSensorUpdatePolicyHostGroupAttachmentOutput

func (o SensorUpdatePolicyHostGroupAttachmentOutput) ToSensorUpdatePolicyHostGroupAttachmentOutput() SensorUpdatePolicyHostGroupAttachmentOutput

func (SensorUpdatePolicyHostGroupAttachmentOutput) ToSensorUpdatePolicyHostGroupAttachmentOutputWithContext

func (o SensorUpdatePolicyHostGroupAttachmentOutput) ToSensorUpdatePolicyHostGroupAttachmentOutputWithContext(ctx context.Context) SensorUpdatePolicyHostGroupAttachmentOutput

type SensorUpdatePolicyHostGroupAttachmentState

type SensorUpdatePolicyHostGroupAttachmentState struct {
	// Host Group ids to attach to the sensor update policy.
	HostGroups pulumi.StringArrayInput
	// The sensor update policy id you want to attach to.
	IdProperty  pulumi.StringPtrInput
	LastUpdated pulumi.StringPtrInput
}

func (SensorUpdatePolicyHostGroupAttachmentState) ElementType

type SensorUpdatePolicyInput

type SensorUpdatePolicyInput interface {
	pulumi.Input

	ToSensorUpdatePolicyOutput() SensorUpdatePolicyOutput
	ToSensorUpdatePolicyOutputWithContext(ctx context.Context) SensorUpdatePolicyOutput
}

type SensorUpdatePolicyMap

type SensorUpdatePolicyMap map[string]SensorUpdatePolicyInput

func (SensorUpdatePolicyMap) ElementType

func (SensorUpdatePolicyMap) ElementType() reflect.Type

func (SensorUpdatePolicyMap) ToSensorUpdatePolicyMapOutput

func (i SensorUpdatePolicyMap) ToSensorUpdatePolicyMapOutput() SensorUpdatePolicyMapOutput

func (SensorUpdatePolicyMap) ToSensorUpdatePolicyMapOutputWithContext

func (i SensorUpdatePolicyMap) ToSensorUpdatePolicyMapOutputWithContext(ctx context.Context) SensorUpdatePolicyMapOutput

type SensorUpdatePolicyMapInput

type SensorUpdatePolicyMapInput interface {
	pulumi.Input

	ToSensorUpdatePolicyMapOutput() SensorUpdatePolicyMapOutput
	ToSensorUpdatePolicyMapOutputWithContext(context.Context) SensorUpdatePolicyMapOutput
}

SensorUpdatePolicyMapInput is an input type that accepts SensorUpdatePolicyMap and SensorUpdatePolicyMapOutput values. You can construct a concrete instance of `SensorUpdatePolicyMapInput` via:

SensorUpdatePolicyMap{ "key": SensorUpdatePolicyArgs{...} }

type SensorUpdatePolicyMapOutput

type SensorUpdatePolicyMapOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyMapOutput) ElementType

func (SensorUpdatePolicyMapOutput) MapIndex

func (SensorUpdatePolicyMapOutput) ToSensorUpdatePolicyMapOutput

func (o SensorUpdatePolicyMapOutput) ToSensorUpdatePolicyMapOutput() SensorUpdatePolicyMapOutput

func (SensorUpdatePolicyMapOutput) ToSensorUpdatePolicyMapOutputWithContext

func (o SensorUpdatePolicyMapOutput) ToSensorUpdatePolicyMapOutputWithContext(ctx context.Context) SensorUpdatePolicyMapOutput

type SensorUpdatePolicyOutput

type SensorUpdatePolicyOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyOutput) Build

Sensor build to use for the sensor update policy.

func (SensorUpdatePolicyOutput) BuildArm64

Sensor arm64 build to use for the sensor update policy (Linux only). Required if platformName is Linux.

func (SensorUpdatePolicyOutput) Description

Description of the sensor update policy.

func (SensorUpdatePolicyOutput) ElementType

func (SensorUpdatePolicyOutput) ElementType() reflect.Type

func (SensorUpdatePolicyOutput) Enabled

Enable the sensor update policy.

func (SensorUpdatePolicyOutput) HostGroups

Host Group ids to attach to the sensor update policy.

func (SensorUpdatePolicyOutput) LastUpdated

func (SensorUpdatePolicyOutput) Name

Name of the sensor update policy.

func (SensorUpdatePolicyOutput) PlatformName

func (o SensorUpdatePolicyOutput) PlatformName() pulumi.StringOutput

Platform for the sensor update policy to manage. (Windows, Mac, Linux)

func (SensorUpdatePolicyOutput) Schedule

Prohibit sensor updates during a set of time blocks.

func (SensorUpdatePolicyOutput) ToSensorUpdatePolicyOutput

func (o SensorUpdatePolicyOutput) ToSensorUpdatePolicyOutput() SensorUpdatePolicyOutput

func (SensorUpdatePolicyOutput) ToSensorUpdatePolicyOutputWithContext

func (o SensorUpdatePolicyOutput) ToSensorUpdatePolicyOutputWithContext(ctx context.Context) SensorUpdatePolicyOutput

func (SensorUpdatePolicyOutput) UninstallProtection

func (o SensorUpdatePolicyOutput) UninstallProtection() pulumi.BoolOutput

Enable uninstall protection. Windows and Mac only.

type SensorUpdatePolicyPrecedence

type SensorUpdatePolicyPrecedence struct {
	pulumi.CustomResourceState

	// The enforcement type for this resource. `strict` requires all non-default sensor update policy ids for platform to be provided. `dynamic` will ensure the provided policies have precedence over others. When using dynamic, policy ids not included in `ids` will retain their current ordering after the managed ids.
	Enforcement pulumi.StringOutput `pulumi:"enforcement"`
	// The policy ids in order. The first ID specified will have the highest precedence and the last ID specified will have the lowest.
	Ids         pulumi.StringArrayOutput `pulumi:"ids"`
	LastUpdated pulumi.StringOutput      `pulumi:"lastUpdated"`
	// That platform of the sensor update policies. (Windows, Mac, Linux)
	PlatformName pulumi.StringOutput `pulumi:"platformName"`
}

This resource allows you to set the precedence of Sensor Update Policies based on the order of IDs.

## API Scopes

The following API scopes are required:

- Sensor update policies | Read & Write

## Example Usage

```go package main

import (

"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := crowdstrike.NewSensorUpdatePolicyPrecedence(ctx, "example", &crowdstrike.SensorUpdatePolicyPrecedenceArgs{
			Ids: pulumi.StringArray{
				pulumi.String("a1j09y3yq0wnrpb5o6jlij9e4f40k6lq"),
				pulumi.String("2asia54xti93bg0jbr5hfpqqbhxbyeoa"),
				pulumi.String("xuzq8hs1uyc2s7zdar3fli0shiyl22vc"),
			},
			PlatformName: pulumi.String("linux"),
			Enforcement:  pulumi.String("dynamic"),
		})
		if err != nil {
			return err
		}
		ctx.Export("sensorUpdatePolicyPrecedence", example)
		return nil
	})
}

```

func GetSensorUpdatePolicyPrecedence

func GetSensorUpdatePolicyPrecedence(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SensorUpdatePolicyPrecedenceState, opts ...pulumi.ResourceOption) (*SensorUpdatePolicyPrecedence, error)

GetSensorUpdatePolicyPrecedence gets an existing SensorUpdatePolicyPrecedence resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSensorUpdatePolicyPrecedence

func NewSensorUpdatePolicyPrecedence(ctx *pulumi.Context,
	name string, args *SensorUpdatePolicyPrecedenceArgs, opts ...pulumi.ResourceOption) (*SensorUpdatePolicyPrecedence, error)

NewSensorUpdatePolicyPrecedence registers a new resource with the given unique name, arguments, and options.

func (*SensorUpdatePolicyPrecedence) ElementType

func (*SensorUpdatePolicyPrecedence) ElementType() reflect.Type

func (*SensorUpdatePolicyPrecedence) ToSensorUpdatePolicyPrecedenceOutput

func (i *SensorUpdatePolicyPrecedence) ToSensorUpdatePolicyPrecedenceOutput() SensorUpdatePolicyPrecedenceOutput

func (*SensorUpdatePolicyPrecedence) ToSensorUpdatePolicyPrecedenceOutputWithContext

func (i *SensorUpdatePolicyPrecedence) ToSensorUpdatePolicyPrecedenceOutputWithContext(ctx context.Context) SensorUpdatePolicyPrecedenceOutput

type SensorUpdatePolicyPrecedenceArgs

type SensorUpdatePolicyPrecedenceArgs struct {
	// The enforcement type for this resource. `strict` requires all non-default sensor update policy ids for platform to be provided. `dynamic` will ensure the provided policies have precedence over others. When using dynamic, policy ids not included in `ids` will retain their current ordering after the managed ids.
	Enforcement pulumi.StringInput
	// The policy ids in order. The first ID specified will have the highest precedence and the last ID specified will have the lowest.
	Ids pulumi.StringArrayInput
	// That platform of the sensor update policies. (Windows, Mac, Linux)
	PlatformName pulumi.StringInput
}

The set of arguments for constructing a SensorUpdatePolicyPrecedence resource.

func (SensorUpdatePolicyPrecedenceArgs) ElementType

type SensorUpdatePolicyPrecedenceArray

type SensorUpdatePolicyPrecedenceArray []SensorUpdatePolicyPrecedenceInput

func (SensorUpdatePolicyPrecedenceArray) ElementType

func (SensorUpdatePolicyPrecedenceArray) ToSensorUpdatePolicyPrecedenceArrayOutput

func (i SensorUpdatePolicyPrecedenceArray) ToSensorUpdatePolicyPrecedenceArrayOutput() SensorUpdatePolicyPrecedenceArrayOutput

func (SensorUpdatePolicyPrecedenceArray) ToSensorUpdatePolicyPrecedenceArrayOutputWithContext

func (i SensorUpdatePolicyPrecedenceArray) ToSensorUpdatePolicyPrecedenceArrayOutputWithContext(ctx context.Context) SensorUpdatePolicyPrecedenceArrayOutput

type SensorUpdatePolicyPrecedenceArrayInput

type SensorUpdatePolicyPrecedenceArrayInput interface {
	pulumi.Input

	ToSensorUpdatePolicyPrecedenceArrayOutput() SensorUpdatePolicyPrecedenceArrayOutput
	ToSensorUpdatePolicyPrecedenceArrayOutputWithContext(context.Context) SensorUpdatePolicyPrecedenceArrayOutput
}

SensorUpdatePolicyPrecedenceArrayInput is an input type that accepts SensorUpdatePolicyPrecedenceArray and SensorUpdatePolicyPrecedenceArrayOutput values. You can construct a concrete instance of `SensorUpdatePolicyPrecedenceArrayInput` via:

SensorUpdatePolicyPrecedenceArray{ SensorUpdatePolicyPrecedenceArgs{...} }

type SensorUpdatePolicyPrecedenceArrayOutput

type SensorUpdatePolicyPrecedenceArrayOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyPrecedenceArrayOutput) ElementType

func (SensorUpdatePolicyPrecedenceArrayOutput) Index

func (SensorUpdatePolicyPrecedenceArrayOutput) ToSensorUpdatePolicyPrecedenceArrayOutput

func (o SensorUpdatePolicyPrecedenceArrayOutput) ToSensorUpdatePolicyPrecedenceArrayOutput() SensorUpdatePolicyPrecedenceArrayOutput

func (SensorUpdatePolicyPrecedenceArrayOutput) ToSensorUpdatePolicyPrecedenceArrayOutputWithContext

func (o SensorUpdatePolicyPrecedenceArrayOutput) ToSensorUpdatePolicyPrecedenceArrayOutputWithContext(ctx context.Context) SensorUpdatePolicyPrecedenceArrayOutput

type SensorUpdatePolicyPrecedenceInput

type SensorUpdatePolicyPrecedenceInput interface {
	pulumi.Input

	ToSensorUpdatePolicyPrecedenceOutput() SensorUpdatePolicyPrecedenceOutput
	ToSensorUpdatePolicyPrecedenceOutputWithContext(ctx context.Context) SensorUpdatePolicyPrecedenceOutput
}

type SensorUpdatePolicyPrecedenceMap

type SensorUpdatePolicyPrecedenceMap map[string]SensorUpdatePolicyPrecedenceInput

func (SensorUpdatePolicyPrecedenceMap) ElementType

func (SensorUpdatePolicyPrecedenceMap) ToSensorUpdatePolicyPrecedenceMapOutput

func (i SensorUpdatePolicyPrecedenceMap) ToSensorUpdatePolicyPrecedenceMapOutput() SensorUpdatePolicyPrecedenceMapOutput

func (SensorUpdatePolicyPrecedenceMap) ToSensorUpdatePolicyPrecedenceMapOutputWithContext

func (i SensorUpdatePolicyPrecedenceMap) ToSensorUpdatePolicyPrecedenceMapOutputWithContext(ctx context.Context) SensorUpdatePolicyPrecedenceMapOutput

type SensorUpdatePolicyPrecedenceMapInput

type SensorUpdatePolicyPrecedenceMapInput interface {
	pulumi.Input

	ToSensorUpdatePolicyPrecedenceMapOutput() SensorUpdatePolicyPrecedenceMapOutput
	ToSensorUpdatePolicyPrecedenceMapOutputWithContext(context.Context) SensorUpdatePolicyPrecedenceMapOutput
}

SensorUpdatePolicyPrecedenceMapInput is an input type that accepts SensorUpdatePolicyPrecedenceMap and SensorUpdatePolicyPrecedenceMapOutput values. You can construct a concrete instance of `SensorUpdatePolicyPrecedenceMapInput` via:

SensorUpdatePolicyPrecedenceMap{ "key": SensorUpdatePolicyPrecedenceArgs{...} }

type SensorUpdatePolicyPrecedenceMapOutput

type SensorUpdatePolicyPrecedenceMapOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyPrecedenceMapOutput) ElementType

func (SensorUpdatePolicyPrecedenceMapOutput) MapIndex

func (SensorUpdatePolicyPrecedenceMapOutput) ToSensorUpdatePolicyPrecedenceMapOutput

func (o SensorUpdatePolicyPrecedenceMapOutput) ToSensorUpdatePolicyPrecedenceMapOutput() SensorUpdatePolicyPrecedenceMapOutput

func (SensorUpdatePolicyPrecedenceMapOutput) ToSensorUpdatePolicyPrecedenceMapOutputWithContext

func (o SensorUpdatePolicyPrecedenceMapOutput) ToSensorUpdatePolicyPrecedenceMapOutputWithContext(ctx context.Context) SensorUpdatePolicyPrecedenceMapOutput

type SensorUpdatePolicyPrecedenceOutput

type SensorUpdatePolicyPrecedenceOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyPrecedenceOutput) ElementType

func (SensorUpdatePolicyPrecedenceOutput) Enforcement

The enforcement type for this resource. `strict` requires all non-default sensor update policy ids for platform to be provided. `dynamic` will ensure the provided policies have precedence over others. When using dynamic, policy ids not included in `ids` will retain their current ordering after the managed ids.

func (SensorUpdatePolicyPrecedenceOutput) Ids

The policy ids in order. The first ID specified will have the highest precedence and the last ID specified will have the lowest.

func (SensorUpdatePolicyPrecedenceOutput) LastUpdated

func (SensorUpdatePolicyPrecedenceOutput) PlatformName

That platform of the sensor update policies. (Windows, Mac, Linux)

func (SensorUpdatePolicyPrecedenceOutput) ToSensorUpdatePolicyPrecedenceOutput

func (o SensorUpdatePolicyPrecedenceOutput) ToSensorUpdatePolicyPrecedenceOutput() SensorUpdatePolicyPrecedenceOutput

func (SensorUpdatePolicyPrecedenceOutput) ToSensorUpdatePolicyPrecedenceOutputWithContext

func (o SensorUpdatePolicyPrecedenceOutput) ToSensorUpdatePolicyPrecedenceOutputWithContext(ctx context.Context) SensorUpdatePolicyPrecedenceOutput

type SensorUpdatePolicyPrecedenceState

type SensorUpdatePolicyPrecedenceState struct {
	// The enforcement type for this resource. `strict` requires all non-default sensor update policy ids for platform to be provided. `dynamic` will ensure the provided policies have precedence over others. When using dynamic, policy ids not included in `ids` will retain their current ordering after the managed ids.
	Enforcement pulumi.StringPtrInput
	// The policy ids in order. The first ID specified will have the highest precedence and the last ID specified will have the lowest.
	Ids         pulumi.StringArrayInput
	LastUpdated pulumi.StringPtrInput
	// That platform of the sensor update policies. (Windows, Mac, Linux)
	PlatformName pulumi.StringPtrInput
}

func (SensorUpdatePolicyPrecedenceState) ElementType

type SensorUpdatePolicySchedule

type SensorUpdatePolicySchedule struct {
	// Enable the scheduler for sensor update policy.
	Enabled bool `pulumi:"enabled"`
	// The time block to prevent sensor updates. Only set when enabled is true.
	TimeBlocks []SensorUpdatePolicyScheduleTimeBlock `pulumi:"timeBlocks"`
	// The time zones that will be used for the time blocks. Only set when enabled is true.
	Timezone *string `pulumi:"timezone"`
}

type SensorUpdatePolicyScheduleArgs

type SensorUpdatePolicyScheduleArgs struct {
	// Enable the scheduler for sensor update policy.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The time block to prevent sensor updates. Only set when enabled is true.
	TimeBlocks SensorUpdatePolicyScheduleTimeBlockArrayInput `pulumi:"timeBlocks"`
	// The time zones that will be used for the time blocks. Only set when enabled is true.
	Timezone pulumi.StringPtrInput `pulumi:"timezone"`
}

func (SensorUpdatePolicyScheduleArgs) ElementType

func (SensorUpdatePolicyScheduleArgs) ToSensorUpdatePolicyScheduleOutput

func (i SensorUpdatePolicyScheduleArgs) ToSensorUpdatePolicyScheduleOutput() SensorUpdatePolicyScheduleOutput

func (SensorUpdatePolicyScheduleArgs) ToSensorUpdatePolicyScheduleOutputWithContext

func (i SensorUpdatePolicyScheduleArgs) ToSensorUpdatePolicyScheduleOutputWithContext(ctx context.Context) SensorUpdatePolicyScheduleOutput

func (SensorUpdatePolicyScheduleArgs) ToSensorUpdatePolicySchedulePtrOutput

func (i SensorUpdatePolicyScheduleArgs) ToSensorUpdatePolicySchedulePtrOutput() SensorUpdatePolicySchedulePtrOutput

func (SensorUpdatePolicyScheduleArgs) ToSensorUpdatePolicySchedulePtrOutputWithContext

func (i SensorUpdatePolicyScheduleArgs) ToSensorUpdatePolicySchedulePtrOutputWithContext(ctx context.Context) SensorUpdatePolicySchedulePtrOutput

type SensorUpdatePolicyScheduleInput

type SensorUpdatePolicyScheduleInput interface {
	pulumi.Input

	ToSensorUpdatePolicyScheduleOutput() SensorUpdatePolicyScheduleOutput
	ToSensorUpdatePolicyScheduleOutputWithContext(context.Context) SensorUpdatePolicyScheduleOutput
}

SensorUpdatePolicyScheduleInput is an input type that accepts SensorUpdatePolicyScheduleArgs and SensorUpdatePolicyScheduleOutput values. You can construct a concrete instance of `SensorUpdatePolicyScheduleInput` via:

SensorUpdatePolicyScheduleArgs{...}

type SensorUpdatePolicyScheduleOutput

type SensorUpdatePolicyScheduleOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyScheduleOutput) ElementType

func (SensorUpdatePolicyScheduleOutput) Enabled

Enable the scheduler for sensor update policy.

func (SensorUpdatePolicyScheduleOutput) TimeBlocks

The time block to prevent sensor updates. Only set when enabled is true.

func (SensorUpdatePolicyScheduleOutput) Timezone

The time zones that will be used for the time blocks. Only set when enabled is true.

func (SensorUpdatePolicyScheduleOutput) ToSensorUpdatePolicyScheduleOutput

func (o SensorUpdatePolicyScheduleOutput) ToSensorUpdatePolicyScheduleOutput() SensorUpdatePolicyScheduleOutput

func (SensorUpdatePolicyScheduleOutput) ToSensorUpdatePolicyScheduleOutputWithContext

func (o SensorUpdatePolicyScheduleOutput) ToSensorUpdatePolicyScheduleOutputWithContext(ctx context.Context) SensorUpdatePolicyScheduleOutput

func (SensorUpdatePolicyScheduleOutput) ToSensorUpdatePolicySchedulePtrOutput

func (o SensorUpdatePolicyScheduleOutput) ToSensorUpdatePolicySchedulePtrOutput() SensorUpdatePolicySchedulePtrOutput

func (SensorUpdatePolicyScheduleOutput) ToSensorUpdatePolicySchedulePtrOutputWithContext

func (o SensorUpdatePolicyScheduleOutput) ToSensorUpdatePolicySchedulePtrOutputWithContext(ctx context.Context) SensorUpdatePolicySchedulePtrOutput

type SensorUpdatePolicySchedulePtrInput

type SensorUpdatePolicySchedulePtrInput interface {
	pulumi.Input

	ToSensorUpdatePolicySchedulePtrOutput() SensorUpdatePolicySchedulePtrOutput
	ToSensorUpdatePolicySchedulePtrOutputWithContext(context.Context) SensorUpdatePolicySchedulePtrOutput
}

SensorUpdatePolicySchedulePtrInput is an input type that accepts SensorUpdatePolicyScheduleArgs, SensorUpdatePolicySchedulePtr and SensorUpdatePolicySchedulePtrOutput values. You can construct a concrete instance of `SensorUpdatePolicySchedulePtrInput` via:

        SensorUpdatePolicyScheduleArgs{...}

or:

        nil

type SensorUpdatePolicySchedulePtrOutput

type SensorUpdatePolicySchedulePtrOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicySchedulePtrOutput) Elem

func (SensorUpdatePolicySchedulePtrOutput) ElementType

func (SensorUpdatePolicySchedulePtrOutput) Enabled

Enable the scheduler for sensor update policy.

func (SensorUpdatePolicySchedulePtrOutput) TimeBlocks

The time block to prevent sensor updates. Only set when enabled is true.

func (SensorUpdatePolicySchedulePtrOutput) Timezone

The time zones that will be used for the time blocks. Only set when enabled is true.

func (SensorUpdatePolicySchedulePtrOutput) ToSensorUpdatePolicySchedulePtrOutput

func (o SensorUpdatePolicySchedulePtrOutput) ToSensorUpdatePolicySchedulePtrOutput() SensorUpdatePolicySchedulePtrOutput

func (SensorUpdatePolicySchedulePtrOutput) ToSensorUpdatePolicySchedulePtrOutputWithContext

func (o SensorUpdatePolicySchedulePtrOutput) ToSensorUpdatePolicySchedulePtrOutputWithContext(ctx context.Context) SensorUpdatePolicySchedulePtrOutput

type SensorUpdatePolicyScheduleTimeBlock

type SensorUpdatePolicyScheduleTimeBlock struct {
	// The days of the week the time block should be active.
	Days []string `pulumi:"days"`
	// The end time for the time block in 24HR format. Must be atleast 1 hour more than start_time.
	EndTime string `pulumi:"endTime"`
	// The start time for the time block in 24HR format. Must be atleast 1 hour before end_time.
	StartTime string `pulumi:"startTime"`
}

type SensorUpdatePolicyScheduleTimeBlockArgs

type SensorUpdatePolicyScheduleTimeBlockArgs struct {
	// The days of the week the time block should be active.
	Days pulumi.StringArrayInput `pulumi:"days"`
	// The end time for the time block in 24HR format. Must be atleast 1 hour more than start_time.
	EndTime pulumi.StringInput `pulumi:"endTime"`
	// The start time for the time block in 24HR format. Must be atleast 1 hour before end_time.
	StartTime pulumi.StringInput `pulumi:"startTime"`
}

func (SensorUpdatePolicyScheduleTimeBlockArgs) ElementType

func (SensorUpdatePolicyScheduleTimeBlockArgs) ToSensorUpdatePolicyScheduleTimeBlockOutput

func (i SensorUpdatePolicyScheduleTimeBlockArgs) ToSensorUpdatePolicyScheduleTimeBlockOutput() SensorUpdatePolicyScheduleTimeBlockOutput

func (SensorUpdatePolicyScheduleTimeBlockArgs) ToSensorUpdatePolicyScheduleTimeBlockOutputWithContext

func (i SensorUpdatePolicyScheduleTimeBlockArgs) ToSensorUpdatePolicyScheduleTimeBlockOutputWithContext(ctx context.Context) SensorUpdatePolicyScheduleTimeBlockOutput

type SensorUpdatePolicyScheduleTimeBlockArray

type SensorUpdatePolicyScheduleTimeBlockArray []SensorUpdatePolicyScheduleTimeBlockInput

func (SensorUpdatePolicyScheduleTimeBlockArray) ElementType

func (SensorUpdatePolicyScheduleTimeBlockArray) ToSensorUpdatePolicyScheduleTimeBlockArrayOutput

func (i SensorUpdatePolicyScheduleTimeBlockArray) ToSensorUpdatePolicyScheduleTimeBlockArrayOutput() SensorUpdatePolicyScheduleTimeBlockArrayOutput

func (SensorUpdatePolicyScheduleTimeBlockArray) ToSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext

func (i SensorUpdatePolicyScheduleTimeBlockArray) ToSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext(ctx context.Context) SensorUpdatePolicyScheduleTimeBlockArrayOutput

type SensorUpdatePolicyScheduleTimeBlockArrayInput

type SensorUpdatePolicyScheduleTimeBlockArrayInput interface {
	pulumi.Input

	ToSensorUpdatePolicyScheduleTimeBlockArrayOutput() SensorUpdatePolicyScheduleTimeBlockArrayOutput
	ToSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext(context.Context) SensorUpdatePolicyScheduleTimeBlockArrayOutput
}

SensorUpdatePolicyScheduleTimeBlockArrayInput is an input type that accepts SensorUpdatePolicyScheduleTimeBlockArray and SensorUpdatePolicyScheduleTimeBlockArrayOutput values. You can construct a concrete instance of `SensorUpdatePolicyScheduleTimeBlockArrayInput` via:

SensorUpdatePolicyScheduleTimeBlockArray{ SensorUpdatePolicyScheduleTimeBlockArgs{...} }

type SensorUpdatePolicyScheduleTimeBlockArrayOutput

type SensorUpdatePolicyScheduleTimeBlockArrayOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyScheduleTimeBlockArrayOutput) ElementType

func (SensorUpdatePolicyScheduleTimeBlockArrayOutput) Index

func (SensorUpdatePolicyScheduleTimeBlockArrayOutput) ToSensorUpdatePolicyScheduleTimeBlockArrayOutput

func (o SensorUpdatePolicyScheduleTimeBlockArrayOutput) ToSensorUpdatePolicyScheduleTimeBlockArrayOutput() SensorUpdatePolicyScheduleTimeBlockArrayOutput

func (SensorUpdatePolicyScheduleTimeBlockArrayOutput) ToSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext

func (o SensorUpdatePolicyScheduleTimeBlockArrayOutput) ToSensorUpdatePolicyScheduleTimeBlockArrayOutputWithContext(ctx context.Context) SensorUpdatePolicyScheduleTimeBlockArrayOutput

type SensorUpdatePolicyScheduleTimeBlockInput

type SensorUpdatePolicyScheduleTimeBlockInput interface {
	pulumi.Input

	ToSensorUpdatePolicyScheduleTimeBlockOutput() SensorUpdatePolicyScheduleTimeBlockOutput
	ToSensorUpdatePolicyScheduleTimeBlockOutputWithContext(context.Context) SensorUpdatePolicyScheduleTimeBlockOutput
}

SensorUpdatePolicyScheduleTimeBlockInput is an input type that accepts SensorUpdatePolicyScheduleTimeBlockArgs and SensorUpdatePolicyScheduleTimeBlockOutput values. You can construct a concrete instance of `SensorUpdatePolicyScheduleTimeBlockInput` via:

SensorUpdatePolicyScheduleTimeBlockArgs{...}

type SensorUpdatePolicyScheduleTimeBlockOutput

type SensorUpdatePolicyScheduleTimeBlockOutput struct{ *pulumi.OutputState }

func (SensorUpdatePolicyScheduleTimeBlockOutput) Days

The days of the week the time block should be active.

func (SensorUpdatePolicyScheduleTimeBlockOutput) ElementType

func (SensorUpdatePolicyScheduleTimeBlockOutput) EndTime

The end time for the time block in 24HR format. Must be atleast 1 hour more than start_time.

func (SensorUpdatePolicyScheduleTimeBlockOutput) StartTime

The start time for the time block in 24HR format. Must be atleast 1 hour before end_time.

func (SensorUpdatePolicyScheduleTimeBlockOutput) ToSensorUpdatePolicyScheduleTimeBlockOutput

func (o SensorUpdatePolicyScheduleTimeBlockOutput) ToSensorUpdatePolicyScheduleTimeBlockOutput() SensorUpdatePolicyScheduleTimeBlockOutput

func (SensorUpdatePolicyScheduleTimeBlockOutput) ToSensorUpdatePolicyScheduleTimeBlockOutputWithContext

func (o SensorUpdatePolicyScheduleTimeBlockOutput) ToSensorUpdatePolicyScheduleTimeBlockOutputWithContext(ctx context.Context) SensorUpdatePolicyScheduleTimeBlockOutput

type SensorUpdatePolicyState

type SensorUpdatePolicyState struct {
	// Sensor build to use for the sensor update policy.
	Build pulumi.StringPtrInput
	// Sensor arm64 build to use for the sensor update policy (Linux only). Required if platformName is Linux.
	BuildArm64 pulumi.StringPtrInput
	// Description of the sensor update policy.
	Description pulumi.StringPtrInput
	// Enable the sensor update policy.
	Enabled pulumi.BoolPtrInput
	// Host Group ids to attach to the sensor update policy.
	HostGroups  pulumi.StringArrayInput
	LastUpdated pulumi.StringPtrInput
	// Name of the sensor update policy.
	Name pulumi.StringPtrInput
	// Platform for the sensor update policy to manage. (Windows, Mac, Linux)
	PlatformName pulumi.StringPtrInput
	// Prohibit sensor updates during a set of time blocks.
	Schedule SensorUpdatePolicySchedulePtrInput
	// Enable uninstall protection. Windows and Mac only.
	UninstallProtection pulumi.BoolPtrInput
}

func (SensorUpdatePolicyState) ElementType

func (SensorUpdatePolicyState) ElementType() reflect.Type

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL