Skip to content

Edit FalconDetection

bk-cs edited this page Sep 22, 2022 · 20 revisions

Edit-FalconDetection

SYNOPSIS

Modify detections

DESCRIPTION

Requires 'Detections: Write'.

PARAMETERS

Name Type Min Max Pattern Allowed Pipeline PipelineByName Description
Status String new
in_progress
true_positive
false_positive
ignored
closed
reopened
False False Detection status
Comment String False False Detection comment
ShowInUi Boolean False False Visible within the Falcon UI [default: $true]
AssignedToUuid String ^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}$ False True User identifier for assignment
Id String[] ^ldt:[a-fA-F0-9]{32}:\d+$ True True Detection identifier

SYNTAX

Edit-FalconDetection [[-Status] <String>] [[-Comment] <String>] [[-ShowInUi] <Boolean>] [[-AssignedToUuid] <String>] [-Id] <String[]> [-WhatIf] [-Confirm] <CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally