Edit FalconDeviceControlClass - CrowdStrike/psfalcon GitHub Wiki

Edit-FalconDeviceControlClass

SYNOPSIS

Modify Device Control policy classes

DESCRIPTION

Requires 'Device control policies: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
InputObject Object[] One or more policy identifiers and class objects to modify in a single request X
Id String Policy identifier
BluetoothClass Object Bluetooth class modifications and exceptions
UsbClass Object USB class modifications and exceptions

SYNTAX

Edit-FalconDeviceControlClass [-Id] <String> [[-BluetoothClass] <Object>] [[-UsbClass] <Object>] [-WhatIf] [-Confirm] [<CommonParameters>]
Edit-FalconDeviceControlClass -InputObject <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /policy/entities/device-control-classes/v1

falconpy

patchDeviceControlPoliciesClassesV1

USAGE

Add USB device exceptions to a policy

[System.Collections.Generic.List[PSCustomObject]]$List = @(
  [PSCustomObject]@{
    action = 'FULL_ACCESS'
    class = 'MASS_STORAGE'
    combined_id = 'id'
  },
  [PSCustomObject]@{
    action = 'FULL_ACCESS'
    class = 'MASS_STORAGE'
    combined_id = 'id'
  }
)
Edit-FalconDeviceControlClass -Id <id> -UsbClass @{ upsert_exceptions = $List }

Remove USB device exceptions from a policy

Edit-FalconDeviceControlClass -Id <id> -UsbClass @{ delete_exceptions = @('id','id','id') }

2025-12-22: PSFalcon v2.2.9

⚠️ **GitHub.com Fallback** ⚠️