Edit FalconResponsePolicy - CrowdStrike/psfalcon GitHub Wiki

Edit-FalconResponsePolicy

SYNOPSIS

Modify Real-time Response policies

DESCRIPTION

Requires 'Response policies: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
InputObject Object[] One or more policies to modify in a single request X
Id String Policy identifier
Name String Policy name
Description String Policy description
Setting Object[] Policy settings

SYNTAX

Edit-FalconResponsePolicy [-Id] <String> [[-Name] <String>] [[-Description] <String>] [[-Setting] <Object[]>] [-WhatIf] [-Confirm] [<CommonParameters>]
Edit-FalconResponsePolicy -InputObject <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /policy/entities/response/v1

falconpy

updateRTResponsePolicies

USAGE

Enable policy settings

$Setting = @(
    @{
        id = 'RealTimeFunctionality'
        value = @{ enabled = $true }
    },
    @{
        id = 'CustomScripts'
        value = @{ enabled = $true }
    },
    @{
        id = 'GetCommand'
        value = @{ enabled = $true }
    },
    @{
        id = 'ExecCommand'
        value = @{ enabled = $true }
    }
)
Edit-FalconResponsePolicy -Id <id> -Setting $Setting

2024-09-03: PSFalcon v2.2.7

⚠️ **GitHub.com Fallback** ⚠️