New FalconIoaGroup

New-FalconIoaGroup

SYNOPSIS

Create a custom Indicator of Attack rule group

DESCRIPTION

Requires 'Custom IOA Rules: Write'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
Name	String					X	Rule group name
Platform	String			windows mac linux		X	Operating system platform
Description	String					X	Rule group description
Comment	String					X	Audit log comment

SYNTAX

New-FalconIoaGroup [-Name] <String> [-Platform] <String> [[-Description] <String>] [[-Comment] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

create_rule_groupMixin0

USAGE

Create custom IOA rule groups

New-FalconIoaGroup -Platform mac -Name newRuleGroup -Description 'My new mac rule group'

2022-10-24: PSFalcon v2.2.3