[ QUESTION ] How to Target All Clients

[slamanna212]

Description of your question
I work for an MSP and I have been tasked with using this tool to add IOA exclusions to all of our clients. Based on the great documentation I have read here, I should be able to create an API key for the parent account and then use that api info for everything. I am unsure if that is correct, and if it is, I am unsure how to actually target all clients. I have checked issues and the samples and did not see anything relevant but I could have missed something.

Expected behavior
I should be able to target all of the clients without having to make API keys for each one

Environment (please complete the following information):

• OS: Windows 11 23H2
• PowerShell: 5.1.22621.5624
• PSFalcon: v2.2.8

Additional context
I found this comment from 2 years ago, but the link to this github is not valid and the info is not on the page it takes me to as far as I can tell: https://www.reddit.com/r/crowdstrike/comments/10y305b/comment/j8070t6/

Thank You!

[bk-cs]

Create an API client in the parent, and use it to pull your list of children, authenticate to each child and run code. There's an example template for doing this here: https://github.com/CrowdStrike/psfalcon/wiki/Authentication#authorize-and-run-commands-across-member-CIDs

Export-FalconConfig can be used to export IoaExclusion. Once you have exported it from the source CID, you can use Import-FalconConfig to create the exclusion in each child.