Bugfix CrowdStrike#260

datorr2 · Dec 9, 2022 · 22e50f1 · 22e50f1
1 parent 2d73687
commit 22e50f1
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/Public/policy-ioa-exclusions.ps1 b/Public/policy-ioa-exclusions.ps1
@@ -25,13 +25,13 @@ https://github.com/crowdstrike/psfalcon/wiki/ConvertTo-FalconIoaExclusion
 #>
     [CmdletBinding()]
     param(
-        [Parameter(Mandatory,ValueFromPipeline,Position=1)]
+        [Parameter(Mandatory,ValueFromPipeline,Position=0)]
         [System.Object]$Detection
     )
     begin { [System.Collections.Generic.List[object]]$Output = @() }
     process {
-        if ($_.behaviors -and $_.device) {
-            @($_.behaviors).Where({ $_.tactic -notmatch '^(Machine Learning|Malware)$' }).foreach{
+        if ($Detection.behaviors -and $Detection.device) {
+            @($Detection.behaviors).Where({ $_.tactic -notmatch '^(Machine Learning|Malware)$' }).foreach{
                 $Output.Add(([PSCustomObject]@{
                     pattern_id = $_.behavior_id
                     pattern_name = $_.display_name
@@ -43,8 +43,8 @@ https://github.com/crowdstrike/psfalcon/wiki/ConvertTo-FalconIoaExclusion
             }
         } else {
             foreach ($Property in @('behaviors','device')) {
-                if (!$_.$Property) {
-                    throw "[ConvertTo-FalconMlExclusion] Missing required '$Property' property."
+                if (!$Detection.$Property) {
+                    throw "[ConvertTo-FalconIoaExclusion] Missing required '$Property' property."
                 }
             }
         }
@@ -315,4 +315,4 @@ https://github.com/crowdstrike/psfalcon/wiki/Remove-FalconIoaExclusion
             Invoke-Falcon @Param -Inputs $PSBoundParameters
         }
     }
-}
+}