Extract PowerShell response to falcon.py

[hermanmaleiane]

Hi Team,

I'm facing some issues trying to handle the response from PowerShell scripts.
I have noticed that for some scripts I'm able to get the response using this script.

requested = falcon_rtra.check_admin_command_status (
cloud_request_id=request_id,
sequence_id=0
)
completed = requested["body"]["resources"][0]["complete"

I'm calling this script Get-MpComputerStatus and get the response:

{'status_code': 200, 'headers': {'Content-Encoding': 'gzip', 'Content-Length': '350', 'Content-Type': 'application/json', 'Date': 'Tue, 07 Dec 2021 13:46:05 GMT', 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains', 'X-Cs-Region': 'us-1', 'X-Cs-Traceid': '9bb288fa-c3cc-4112-86f6-d9bca0660177', 'X-Ratelimit-Limit': '6000', 'X-Ratelimit-Remaining': '5991'}, 'body': {'meta': {'query_time': 0.005802044, 'powered_by': 'empower-api', 'trace_id': '9bb288fa-c3cc-4112-86f6-d9bca0660177'}, 'resources': [{'session_id': 'd460ed4a-eaf0-4a0f-8711-b7ac049f42af', 'task_id': 'e137d9c4-e294-4b29-bdf3-fd7081dd210a', 'complete': True, 'stdout': 'MSFT_MpComputerStatus (ComputerID = "2D8EAE7D-FA65-4D42-97A6-DBB99157D147")\n', 'stderr': '', 'base_command': 'runscript'}], 'errors': []}}

The information i want to handle on python

if i execute **Get-LocalUser | Select *** from falcon.py

Same on PowerShell

[hermanmaleiane]

Sorry after digging a little bit i figured out what's happened.

It brings the result when you set **Get-MpComputerStatus | select ***