Remove FalconIoc

Remove-FalconIoc

SYNOPSIS

Remove custom indicators

DESCRIPTION

Requires 'IOC Manager APIs: Write'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
Filter	String						Falcon Query Language expression to find indicators for removal
Comment	String						Audit log comment
Id	String[]				X	X	Indicator identifier

SYNTAX

Remove-FalconIoc [[-Comment] <String>] [[-Id] <String[]>] [-WhatIf] [-Confirm] [<CommonParameters>]

Remove-FalconIoc -Filter <String> [[-Comment] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

indicator.delete.v1

USAGE

Deleting indicators by identifier

Remove-FalconIoc -Id <id>, <id>

2022-10-24: PSFalcon v2.2.3