Edit FalconScript - CrowdStrike/psfalcon GitHub Wiki
Modify a Real-time Response script
Requires 'Real time response (admin): Write'.
Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
---|---|---|---|---|---|---|---|
Platform | String[] | Operating system platform |
windows mac linux
|
X | |||
PermissionType | String | Permission level [public: 'Administrators' and 'Active Responders', group: 'Administrators', private: creator] |
private group public
|
X | |||
Name | String | Script name | X | ||||
Description | String | Script description | X | ||||
Comment | String | Audit log comment | 1 |
4096 |
X | ||
Path | String | Path to script file | X | ||||
Id | String | Script identifier | X |
Edit-FalconScript [[-Platform] <String[]>] [[-PermissionType] <String>] [[-Name] <String>] [[-Description] <String>] [[-Comment] <String>] [-Path] <String> [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]
PATCH /real-time-response/entities/scripts/v1
Edit-FalconScript -Id <id> -Name new_script_name
Get-FalconScript -Filter "name:'my_script'" | Edit-FalconScript -Id <id> -Name new_script_name
2023-04-25: PSFalcon v2.2.5