Skip to content

Remove FalconIoaRule

bk-cs edited this page Sep 22, 2022 · 18 revisions

Remove-FalconIoaRule

SYNOPSIS

Remove custom Indicator of Attack rules from rule groups

DESCRIPTION

Requires 'Custom IOA Rules: Write'.

PARAMETERS

Name Type Min Max Allowed Pipeline PipelineByName Description
Comment String Audit log comment
RuleGroupId String X Rule group identifier
Id String[] X Rule identifier

SYNTAX

Remove-FalconIoaRule [[-Comment] <String>] [-RuleGroupId] <String> [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally