Receive FalconArtifact

Receive-FalconArtifact

SYNOPSIS

Download an artifact from a Falcon X Sandbox report

DESCRIPTION

Requires 'Sandbox (Falcon X): Read'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
Path	String						Destination path
Id	String				X	X	Artifact identifier
Force	Switch						Overwrite an existing file when present

SYNTAX

Receive-FalconArtifact [-Path] <String> [-Id] <String> [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]

USAGE

Download a strict IOC pack

$Report = Get-FalconReport -Id <id>
Receive-FalconArtifact -Id $Report.ioc_report_strict_csv_artifact_id -Path .\ioc_report_strict_csv_artifact_id.csv

See Get-FalconReport.

2022-10-10: PSFalcon v2.2.3