Skip to content

Receive FalconMalQuerySample

bk-cs edited this page Oct 31, 2022 · 17 revisions

Receive-FalconMalQuerySample

SYNOPSIS

Download a sample or sample archive from Falcon MalQuery [password: 'infected']

DESCRIPTION

Requires 'MalQuery: Read'.

PARAMETERS

Name Type Min Max Allowed Pipeline PipelineByName Description
Path String Destination path
Id String X X Sha256 hash value or MalQuery sample archive identifier
Force Switch Overwrite an existing file when present

SYNTAX

Receive-FalconMalQuerySample [-Path] <String> [-Id] <String> [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

GetMalQueryDownloadV1

USAGE

Download a MalQuery sample

Receive-FalconMalQuerySample -Id <sha256> -Path .\infected.exe

2022-10-31: PSFalcon v2.2.3

Clone this wiki locally