Create Batch Session

Batch initialize a RTR session on multiple hosts. Before any RTR commands can be used, an active session is needed on the host.

External Documentation

To learn more, visit the CrowdStrike documentation.

Parameters

Parameter	Description
Host IDs	A comma-separated list of host IDs to initialize a RTR session. Can be obtained via the List Devices action.

Example Output

{
    "meta": {
        "query_time": 5.014495063,
        "powered_by": "empower-api",
        "trace_id": "123456-1234-1234-1234-1234567"
    },
    "batch_id": "12345-1234-1234-1234-1234567",
    "resources": {
        "1234567891§23456789": {
            "session_id": "1324567-12345-2345-31245-12345678",
            "task_id": "12345-2345-12345-123456-123456789",
            "complete": true,
            "stdout": "C:\\",
            "stderr": "",
            "base_command": "pwd",
            "aid": "123456789324567891324567",
            "errors": [],
            "query_time": 0,
            "offline_queued": false
        }
    },
    "errors": []
}

Workflow Library Example

Create Batch Session with Crowdstrike and Send Results Via Email

Preview this Workflow on desktop