ConvertTo FalconIoaExclusion
Output required fields to create an Indicator of Attack exclusion from a Falcon detection
Uses the 'behaviors' and 'device' properties of a detection to generate the necessary fields to create a new
| Name | Type | Min | Max | Allowed | Pipeline | PipelineByName | Description |
|---|---|---|---|---|---|---|---|
| Detection | Object | X | Falcon detection content, including 'behaviors' and 'device' |
ConvertTo-FalconIoaExclusion [-Detection] <Object> [<CommonParameters>]Generated 2022-10-06 using PSFalcon v2.2.3
