New FalconIoaExclusion - CrowdStrike/psfalcon Wiki

New-FalconIoaExclusion

SYNOPSIS

Create an Indicator of Attack exclusion

DESCRIPTION

Requires 'IOA Exclusions: Write'.

PARAMETERS

Name Type Min Max Allowed Pipeline PipelineByName Description
Name String X Exclusion name
PatternId String X Indicator of Attack pattern identifier
PatternName String X Indicator of Attack pattern name
ClRegex String X Command line RegEx
IfnRegex String X Image Filename RegEx
GroupId Object[] X Host group identifier, or leave undefined to apply to all hosts
Description String X Exclusion description
Comment String X Audit log comment

SYNTAX

New-FalconIoaExclusion [-Name] <String> [-PatternId] <String> [-PatternName] <String> [-ClRegex] <String> [-IfnRegex] <String> [[-GroupId] 
<Object[]>] [[-Description] <String>] [[-Comment] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

⚠️ **GitHub.com Fallback** ⚠️