Skip to content

New FalconIoaGroup

bk-cs edited this page Oct 20, 2022 · 18 revisions

New-FalconIoaGroup

SYNOPSIS

Create a custom Indicator of Attack rule group

DESCRIPTION

Requires 'Custom IOA Rules: Write'.

PARAMETERS

Name Type Min Max Allowed Pipeline PipelineByName Description
Name String X Rule group name
Platform String windows
mac
linux
X Operating system platform
Description String X Rule group description
Comment String X Audit log comment

SYNTAX

New-FalconIoaGroup [-Name] <String> [-Platform] <String> [[-Description] <String>] [[-Comment] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

USAGE

Create custom IOA rule groups

New-FalconIoaGroup -Platform mac -Name newRuleGroup -Description 'My new mac rule group'

2022-10-20: PSFalcon v2.2.3

Clone this wiki locally