Receive FalconArtifact
Download an artifact from a Falcon Intelligence Sandbox report
Artifact identifier values can be retrieved for specific Falcon Intelligence Sandbox reports using 'Get-FalconReport'.
Requires 'Sandbox (Falcon Intelligence): Read'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Path | String | Destination path | |||||
| Id | String | Artifact identifier | X | X | |||
| Force | Switch | Overwrite an existing file when present |
Receive-FalconArtifact [-Path] <String> [-Id] <String> [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]GET /falconx/entities/artifacts/v1
$Report = Get-FalconReport -Id <id>
Receive-FalconArtifact -Id $Report.ioc_report_strict_csv_artifact_id -Path .\ioc_report_strict_csv_artifact_id.csvSee Get-FalconReport.
2023-04-25: PSFalcon v2.2.5
