CROWDSTRIKE FALCON MCP POLICY

version: "1"
description: "Policy for falcon-mcp"
default: "allow"
tools:
    falcon_check_connectivity:
        rules: []
    falcon_list_enabled_modules:
        rules: []
    falcon_list_modules:
        rules: []
    falcon_search_kubernetes_containers:
        rules: []
    falcon_count_kubernetes_containers:
        rules: []
    falcon_search_images_vulnerabilities:
        rules: []
    falcon_search_detections:
        rules: []
    falcon_get_detection_details:
        rules: []
    falcon_search_applications:
        rules: []
    falcon_search_unmanaged_assets:
        rules: []
    falcon_search_hosts:
        rules: []
    falcon_get_host_details:
        rules: []
    falcon_show_crowd_score:
        rules: []
    falcon_search_incidents:
        rules: []
    falcon_get_incident_details:
        rules: []
    falcon_search_behaviors:
        rules: []
    falcon_get_behavior_details:
        rules: []
    search_ngsiem:
        rules: []
    falcon_search_actors:
        rules: []
    falcon_search_indicators:
        rules: []
    falcon_search_reports:
        rules: []
    falcon_get_mitre_report:
        rules: []
    falcon_search_iocs:
        rules: []
    falcon_search_sensor_usage:
        rules: []
    falcon_search_scheduled_reports:
        rules: []
    falcon_search_report_executions:
        rules: []
    falcon_download_report_execution:
        rules: []
    falcon_search_serverless_vulnerabilities:
        rules: []
    falcon_search_vulnerabilities:
        rules: []
    falcon_add_ioc:
        rules: []
    falcon_remove_iocs:
        rules: []
    falcon_launch_scheduled_report:
        rules: []
    idp_investigate_entity:
        rules: []