Edit FalconReconAction

Edit-FalconReconAction

SYNOPSIS

Modify a Falcon Intelligence Recon action

DESCRIPTION

Requires 'Monitoring Rules (Falcon Intelligence Recon): Write'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
Frequency	String			asap daily weekly		X	Action frequency
Recipient	String[]					X	Email address
Status	String			enabled muted		X	Action status
ContentFormat	String			standard enhanced		X	Email format
TriggerMatchless	Boolean					X	Send email when no matches are found
Id	String					X	Action identifier

SYNTAX

Edit-FalconReconAction [-Frequency] <String> [-Recipient] <String[]> [-Status] <String> [-ContentFormat] <String> [-TriggerMatchless] <Boolean> [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

UpdateActionV1

USAGE

Updating email notifications for a monitoring rule

Edit-FalconReconAction -Id <id> -Frequency weekly

2023-01-17: PSFalcon v2.2.4