Skip to content

Remove FalconIoaRule

bk-cs edited this page Oct 6, 2022 · 18 revisions

Remove-FalconIoaRule

SYNOPSIS

Remove custom Indicator of Attack rules from rule groups

DESCRIPTION

Requires 'Custom IOA Rules: Write'.

PARAMETERS

Name Type Min Max Allowed Pipeline PipelineByName Description
Comment String Audit log comment
RuleGroupId String X Rule group identifier
Id String[] X Rule identifier

SYNTAX

Remove-FalconIoaRule [[-Comment] <String>] [-RuleGroupId] <String> [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

USAGE

Delete custom IOA rules

Remove-FalconIoaRule -RulegroupId <id> -Id <id>, <id>

Generated 2022-15-06 using PSFalcon v2.2.3

Clone this wiki locally