Edit FalconPreventionPolicy - CrowdStrike/psfalcon GitHub Wiki

Edit-FalconPreventionPolicy

SYNOPSIS

Modify Prevention policies

DESCRIPTION

Requires 'Prevention Policies: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
InputObject Object[] One or more policies to modify in a single request X
Id String Policy identifier
Name String Policy name
Description String Policy description
Setting Object[] Policy settings

SYNTAX

Edit-FalconPreventionPolicy [-Id] <String> [[-Name] <String>] [[-Description] <String>] [[-Setting] <Object[]>] [-WhatIf] [-Confirm] [<CommonParameters>]
Edit-FalconPreventionPolicy -InputObject <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /policy/entities/prevention/v1

falconpy

updatePreventionPolicies

USAGE

Configure policy settings

$Setting = @(
    @{
        id = 'AdditionalUserModeData'
        value = @{ enabled = $false }
        }
    )
Edit-FalconPreventionPolicy -Id <id> -Name 'AV Policy' -Setting $Setting

2024-09-03: PSFalcon v2.2.7

⚠️ **GitHub.com Fallback** ⚠️