Skip to content

Edit FalconIoaExclusion

bk-cs edited this page Sep 22, 2022 · 20 revisions

Edit-FalconIoaExclusion

SYNOPSIS

Modify an Indicator of Attack exclusion

DESCRIPTION

Requires 'IOA Exclusions: Write'.

PARAMETERS

Name Type Min Max Pattern Allowed Pipeline PipelineByName Description
Name String False Exclusion name
ClRegex String False Command line RegEx
IfnRegex String False Image Filename RegEx
GroupId Object[] False Host group identifier or 'all' to apply to all hosts
Description String False Exclusion description
Comment String False Audit log comment
Id String `^([a-fA-F0-9]{32} all)$`

SYNTAX

Edit-FalconIoaExclusion [[-Name] <String>] [[-ClRegex] <String>] [[-IfnRegex] <String>] [[-GroupId] <Object[]>] [[-Description] <String>] [[-Comment] <String>] -Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally