ConvertTo FalconIoaExclusion
Output required fields to create an Indicator of Attack exclusion from a Falcon detection
Uses the 'behaviors' and 'device' properties of a detection to generate the necessary fields to create a new
| Name | Type | Min | Max | Pattern | Allowed | Pipeline | PipelineByName | Description |
|---|---|---|---|---|---|---|---|---|
| Detection | Object | False | Falcon detection content, including 'behaviors' and 'device' |
ConvertTo-FalconIoaExclusion [-Detection] <Object> [<CommonParameters>]
Generated 20220922 using PSFalcon v2.2.3
