Skip to content

Edit FalconIoaExclusion

bk-cs edited this page Sep 22, 2022 · 20 revisions

Edit-FalconIoaExclusion

SYNOPSIS

Modify an Indicator of Attack exclusion

DESCRIPTION

Requires 'IOA Exclusions: Write'.

PARAMETERS

Name Type Min Max Pattern Allowed Pipeline PipelineByName Description
Name String False True Exclusion name
ClRegex String False True Command line RegEx
IfnRegex String False True Image Filename RegEx
GroupId Object[] False True Host group identifier or 'all' to apply to all hosts
Description String False True Exclusion description
Comment String False True Audit log comment
Id String `^([a-fA-F0-9]{32} all)$` True True

SYNTAX

Edit-FalconIoaExclusion [[-Name] <String>] [[-ClRegex] <String>] [[-IfnRegex] <String>] [[-GroupId] <Object[]>] [[-Description] <String>] [[-Comment] <String>] -Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally