Edit FalconReconAction - CrowdStrike/psfalcon GitHub Wiki
Modify a Falcon Intelligence Recon action
Requires 'Monitoring rules (Falcon Intelligence Recon): Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Frequency | String | Action frequency |
asapdailyweekly
|
X | |||
| Recipient | String[] | Email address | X | ||||
| Status | String | Action status |
enabledmuted
|
X | |||
| ContentFormat | String | Email format |
standardenhanced
|
X | |||
| TriggerMatchless | Boolean | Send email when no matches are found | X | ||||
| Id | String | Action identifier | X |
Edit-FalconReconAction [-Frequency] <String> [-Recipient] <String[]> [-Status] <String> [-ContentFormat] <String> [-TriggerMatchless] <Boolean> [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]PATCH /recon/entities/actions/v1
Edit-FalconReconAction -Id <id> -Frequency weekly2023-04-25: PSFalcon v2.2.5
