Confirm FalconResponderCommand - CrowdStrike/psfalcon GitHub Wiki
Verify the status of a Real-time Response 'active-responder' command issued to a single-host session
Confirms the status of an executed 'active-responder' command. The single-host Real-time Response APIs require that commands be confirmed to 'acknowledge' that they have been processed as part of your API-based workflow. Failing to confirm after commands can lead to unexpected results.
A 'sequence_id' value of 0 is added if the parameter is not specified.
Requires 'Real time response: Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| SequenceId | Int32 | Sequence identifier | |||||
| CloudRequestId | String | Command request identifier | X | X |
Confirm-FalconResponderCommand [[-SequenceId] <Int32>] [-CloudRequestId] <String> [-WhatIf] [-Confirm] [<CommonParameters>]GET /real-time-response/entities/active-responder-command/v1
RTR_CheckActiveResponderCommandStatus
2023-04-25: PSFalcon v2.2.5
