Get FalconIoaExclusion

Get-FalconIoaExclusion

SYNOPSIS

Search for Indicator of Attack exclusions

DESCRIPTION

Requires 'IOA Exclusions: Read'.

PARAMETERS

Name	Type	Description	Min	Max	Allowed	Pipeline	PipelineByName
Id	String[]	Exclusion identifier				X	X
Filter	String	Falcon Query Language expression to limit results
Sort	String	Property and direction to sort results			applied_globally.asc applied_globally.desc created_by.asc created_by.desc created_on.asc created_on.desc last_modified.asc last_modified.desc modified_by.asc modified_by.desc name.asc name.desc pattern_id.asc pattern_id.desc pattern_name.asc pattern_name.desc
Limit	Int32	Maximum number of results per request	1	500
Offset	Int32	Position to begin retrieving results
Detailed	Switch	Retrieve detailed information
All	Switch	Repeat requests until all available results are retrieved
Total	Switch	Display total result count instead of results

SYNTAX

Get-FalconIoaExclusion [[-Filter] <String>] [[-Sort] <String>] [[-Limit] <Int32>] [-Offset <Int32>] [-Detailed] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]

Get-FalconIoaExclusion -Id <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /policy/entities/ioa-exclusions/v1
GET /policy/queries/ioa-exclusions/v1

falconpy

queryIOAExclusionsV1
getIOAExclusionsV1

USAGE

Find IOA exclusions

Get-FalconIoaExclusion [-Detailed]

2023-04-25: PSFalcon v2.2.5