Remove FalconIoaRule
Remove custom Indicator of Attack rules from rule groups
Requires 'Custom IOA Rules: Write'.
| Name | Type | Min | Max | Pattern | Allowed | Pipeline | PipelineByName | Description |
|---|---|---|---|---|---|---|---|---|
| Comment | String | False | False | Audit log comment | ||||
| RuleGroupId | String | ^[a-fA-F0-9]{32}$ |
False | True | Rule group identifier | |||
| Id | String[] | ^\d+$ |
False | True | Rule identifier |
Remove-FalconIoaRule [[-Comment] <String>] [-RuleGroupId] <String> [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]
Generated 20220922 using PSFalcon v2.2.3
