Skip to content

Remove FalconIoaGroup

bk-cs edited this page Oct 24, 2022 · 17 revisions

Remove-FalconIoaGroup

SYNOPSIS

Remove custom Indicator of Attack rule groups

DESCRIPTION

Requires 'Custom IOA Rules: Write'.

PARAMETERS

Name Type Min Max Allowed Pipeline PipelineByName Description
Comment String Audit log comment
Id String[] X X Rule group identifier

SYNTAX

Remove-FalconIoaGroup [[-Comment] <String>] [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

delete_rule_groupsMixin0

USAGE

Delete custom IOA rule groups

Remove-FalconIoaGroup -Id <id>, <id>

2022-10-24: PSFalcon v2.2.3

Clone this wiki locally