Edit FalconItTask - CrowdStrike/psfalcon GitHub Wiki

Edit-FalconItTask

SYNOPSIS

Modify Falcon for IT tasks

DESCRIPTION

Requires 'IT Automation - Tasks: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Name String Task name X
Description String Task description X
TaskType String Task type query
remediation 		X
AccessType String Task access type Public
Shared 		X
Target String Falcon Query Language expression to define target hosts X
Parameter Object[] Task X
Query Object Query X
CompositeQuery Object Composite query X
Remediation Object Remediation X
Trigger Object[] Trigger condition X
Verification Object[] Verification condition X
OsQuery String OsQuery statement X
TaskGroupId String Task group identifier X
AddUserGroupId String[] User group identifier to add
AddUserId String[] User identifier to add
RemoveUserGroupId String[] User group identifier to remove
RemoveUserId String[] User identifier to remove
OutputParser Object Column and delimiter values to parse result output X
Id String Task identifier X X

SYNTAX

Edit-FalconItTask [[-Name] <String>] [[-Description] <String>] [[-TaskType] <String>] [[-AccessType] <String>] [[-Target] <String>] [[-Parameter] <Object[]>] [[-Query] <Object>] [[-CompositeQuery] <Object>] [[-Remediation] <Object>] [[-Trigger] <Object[]>] [[-Verification] <Object[]>] [[-OsQuery] <String>] [[-TaskGroupId] <String>] [[-AddUserGroupId] <String[]>] [[-AddUserId] <String[]>] [[-RemoveUserGroupId] <String[]>] [[-RemoveUserId] <String[]>] [[-OutputParser] <Object>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /it-automation/entities/tasks/v1

falconpy

ITAutomationUpdateTask

USAGE

Modify a task

Edit-FalconItTask -Id <id> -Name 'it automation test - 1' -Description 'Updated description' -Target "platform_name:'Windows'" -TaskType query -Query @{ windows = @{ content = 'pwd'; language = 'powershell' }}

2025-09-02: PSFalcon v2.2.9

⚠️ **GitHub.com Fallback** ⚠️