New FalconCompleteCase - CrowdStrike/psfalcon GitHub Wiki

New-FalconCompleteCase

SYNOPSIS

Create a Falcon Complete case

DESCRIPTION

Requires 'Message Center: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Type String Case type fc:detection-support
fc:contact
fc:falcon-product-support
fc:incident-support
Title String Case title
Content String Case content
DetectionId String[] Detection identifier X
IncidentId String[] Incident identifier X
MalwareSubmissionId String Malware submission identifier X
ReconRuleType String Recon rule type X
UserId String User identifier X

SYNTAX

New-FalconCompleteCase [-Type] <String> [-Title] <String> [-Content] <String> [[-DetectionId] <String[]>] [[-IncidentId] <String[]>] [[-MalwareSubmissionId] <String>] [[-ReconRuleType] <String>] [-UserId] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

POST /message-center/entities/case/v2

falconpy

CreateCaseV2

USAGE

Getting support for a detection

New-FalconCompleteCase -UserId <user_uuid> -Type 'fc:detection-support' -Title 'support case with detection' -Content 'case with detection' -DetectionId <id>, <id>

See Find detections.

Getting support for an incident

New-FalconCompleteCase -UserId <user_uuid> -Type 'fc:incident-support' -Title 'support case with incident' -Content 'case with incident' -IncidentId <id>, <id>

See Find incidents.

Contacting the Falcon Complete team

New-FalconCompleteCase -UserId <user_uuid> -Type 'fc:contact' -Title 'falcon complete support case' -Content 'falcon complete support case'

See Find a user ID by username.

Getting general support for Falcon products

New-FalconCompleteCase -UserId <user_uuid> -Type 'fc:falcon-product-support' -Title 'contact support' -Content 'contact support'

See Find a user ID by username.

2024-12-19: PSFalcon v2.2.8

⚠️ **GitHub.com Fallback** ⚠️