Skip to content

Invoke FalconQuarantineAction

bk-cs edited this page Sep 22, 2022 · 22 revisions

Invoke-FalconQuarantineAction

SYNOPSIS

Perform actions on quarantined files

DESCRIPTION

Requires 'Quarantined Files: Write'.

PARAMETERS

Name Type Min Max Allowed Pipeline PipelineByName Description
Action String release
unrelease
delete
False False Action to perform
Filter String False False Falcon Query Language statement
Query String False False Match phrase prefix
Comment String False False Audit log comment
Id String[] True True Quarantined file identifier

SYNTAX

Invoke-FalconQuarantineAction [-Action] <String> [[-Comment] <String>] [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]
Invoke-FalconQuarantineAction [-Action] <String> -Filter <String> [[-Query] <String>] [[-Comment] <String>] [-WhatIf] [-Confirm] <CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally