Skip to content

Send FalconSampleArchive

bk-cs edited this page Apr 28, 2023 · 2 revisions

Send-FalconSampleArchive

SYNOPSIS

Upload an archive containing sample files.

Once upload has been completed, use the returned 'sha256' value with 'Expand-FalconSampleArchive' to extract files for submission to Falcon Intelligence Sandbox or QuickScan.

DESCRIPTION

Requires 'Sample uploads: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
IsConfidential Boolean Prohibit sample(s) from being displayed in MalQuery [default: True]
Comment String Audit log comment
Password String Password to extract files from archive
Name String File name
Path String Path to local file X

SYNTAX

Send-FalconSampleArchive [[-IsConfidential] <Boolean>] [[-Comment] <String>] [[-Password] <String>] [[-Name] <String>] [-Path] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

POST /archives/entities/archives/v2

falconpy

ArchiveUploadV2

USAGE

2023-04-25: PSFalcon v2.2.5

Clone this wiki locally