Response Policy Details

{"id":"c7a9eb6948d64eb8be0cb563d065f407","name":"platform_default","description":"Platform default policy","platform_name":"Windows","enabled":true,"created_by":"84393bf974fd44bda943a25a6a7bc27f","created_timestamp":"2025-12-07T09:46:59.444162001Z","modified_by":"84393bf974fd44bda943a25a6a7bc27f","modified_timestamp":"2025-12-07T09:49:01.858318771Z","groups":[],"settings":[{"name":"Enable/Disable","settings":[{"id":"RealTimeFunctionality","name":"Real Time Response","type":"toggle","description":"Allow those with Real Time Responder roles to remotely connect to hosts. Required for all RTR commands and scripts and for partner software update policies.","value":{"enabled":true}}]},{"name":"Scripts","settings":[{"id":"CustomScripts","name":"Custom Scripts","type":"toggle","description":"Allows those with RTR Active Responder and RTR Administrator roles to run custom scripts","value":{"configured":false,"enabled":false}},{"id":"FalconScripts","name":"Falcon Scripts","type":"toggle","description":"Allows those with the RTR Administrator role to run Falcon scripts. Requires custom scripts to be enabled.","value":{"configured":false,"enabled":false}}]},{"name":"High risk commands","settings":[{"id":"GetCommand","name":"get","type":"toggle","description":"Extract files from a remote host via the CrowdStrike cloud","value":{"enabled":true}},{"id":"PutCommand","name":"put","type":"toggle","description":"Send files to a remote host via the CrowdStrike cloud. Required for partner software update policies","value":{"enabled":true}},{"id":"MemDumpCommand","name":"memdump","type":"toggle","description":"Dump process memory of a remote host","value":{"enabled":true}},{"id":"XMemDumpCommand","name":"xmemdump","type":"toggle","description":"Dump the complete memory of a remote host","value":{"enabled":true}},{"id":"ExecCommand","name":"run","type":"toggle","description":"Run any executable on the remote host","value":{"configured":false,"enabled":false}},{"id":"PutAndRunCommand","name":"put-and-run","type":"toggle","description":"Send files to a secure directory on a remote host via the CrowdStrike cloud and execute them with a single command","value":{"configured":false,"enabled":false}}]}]}