Edit FalconSvExclusion - CrowdStrike/psfalcon GitHub Wiki
Modify a Sensor Visibility exclusion
Requires 'Sensor Visibility Exclusions: Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Value | String | RegEx pattern value | X | ||||
| GroupId | Object[] | Host group identifier or 'all' to apply to all hosts | X | ||||
| DescendantProcess | Boolean | Apply to descendant processes | X | ||||
| Comment | String | Audit log comment | X | ||||
| Id | String | Exclusion identifier | X | X |
Edit-FalconSvExclusion [[-Value] <String>] [[-GroupId] <Object[]>] [[-DescendantProcess] <Boolean>] [[-Comment] <String>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]PATCH /policy/entities/sv-exclusions/v1
updateSensorVisibilityExclusionsV1
Edit-FalconSvExclusion -Id <id> -Value '/foochanged*'See Modify all Sensor Visibility exclusions to include an additional Host Group.
2024-09-03: PSFalcon v2.2.7
