Invoke FalconDeviceControlPolicyAction - CrowdStrike/psfalcon GitHub Wiki
Perform actions on Falcon Device Control policies
Requires 'Device control policies: Write'.
Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
---|---|---|---|---|---|---|---|
Name | String | Action to perform |
add-host-group disable enable remove-host-group
|
||||
GroupId | String | Host group identifier | |||||
Id | String | Policy identifier | X | X |
Invoke-FalconDeviceControlPolicyAction [-Name] <String> [[-GroupId] <String>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]
POST /policy/entities/device-control-actions/v1
performDeviceControlPoliciesAction
Invoke-FalconDeviceControlPolicyAction -Name add-host-group -Id <id> -GroupId <id>
Invoke-FalconDeviceControlPolicyAction -Name enable -Id <id>
2023-04-25: PSFalcon v2.2.5