Remove FalconIoc

Remove-FalconIoc

SYNOPSIS

Remove custom indicators

DESCRIPTION

Requires 'IOC Manager APIs: Write'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
Filter	String						Falcon Query Language expression to find indicators for removal
Comment	String						Audit log comment
FromParent	Boolean						Inheritance from parent CID
Id	String[]				X	X	Indicator identifier

SYNTAX

Remove-FalconIoc [[-Comment] <String>] [[-FromParent] <Boolean>] [[-Id] <String[]>] [-WhatIf] [-Confirm] [<CommonParameters>]

Remove-FalconIoc -Filter <String> [[-Comment] <String>] [[-FromParent] <Boolean>] [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

indicator_delete_v1

USAGE

Deleting indicators by identifier

Remove-FalconIoc -Id <id>, <id>

2023-01-17: PSFalcon v2.2.4