Skip to content

Invoke FalconPreventionPolicyAction

bk-cs edited this page Apr 28, 2023 · 20 revisions

Invoke-FalconPreventionPolicyAction

SYNOPSIS

Perform actions on Prevention policies

DESCRIPTION

Requires 'Prevention Policies: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Name String Action to perform add-host-group
add-rule-group
disable
enable
remove-host-group
remove-rule-group
GroupId String Host or rule group identifier
Id String Policy identifier X X

SYNTAX

Invoke-FalconPreventionPolicyAction [-Name] <String> [[-GroupId] <String>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

POST /policy/entities/prevention-actions/v1

falconpy

performPreventionPoliciesAction

USAGE

Assign host groups to policies

Invoke-FalconPreventionPolicyAction -Name add-host-group -Id <policy_id> -GroupId <host_group_id>
Get-FalconPreventionPolicy -Filter "name:'my_policy'" | Invoke-FalconPreventionPolicyAction -Name add-host-group -GroupId <host_group_id>

2023-04-25: PSFalcon v2.2.5

Clone this wiki locally