New FalconPreventionPolicy - CrowdStrike/psfalcon GitHub Wiki

New-FalconPreventionPolicy

SYNOPSIS

Create Prevention policies

DESCRIPTION

Requires 'Prevention Policies: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
InputObject Object[] One or more policies to create in a single request X
Name String Policy name
PlatformName String Operating system platform Windows
Mac
Linux
iOS
Android
Description String Policy description
Setting Object[] An array of policy settings

SYNTAX

New-FalconPreventionPolicy [-Name] <String> [-PlatformName] <String> [[-Description] <String>] [[-Setting] <Object[]>] [-WhatIf] [-Confirm] [<CommonParameters>]
New-FalconPreventionPolicy -InputObject <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

POST /policy/entities/prevention/v1

falconpy

createPreventionPolicies

USAGE

Create a policy

$Setting = @(
    @{
        id = 'AdditionalUserModeData'
        value = @{ enabled = $true }
    },
    @{
        id = 'EndUserNotifications'
        value = @{ enabled = $true }
    },
    @{
        id = 'CloudAntiMalware'
        value = @{ detection = 'MODERATE'; prevention = 'MODERATE' }
    }
)
New-FalconPreventionPolicy -PlatformName Windows -Name 'Demo Policy' -Description 'This is a demo policy' -Setting $Setting

2024-09-03: PSFalcon v2.2.7

⚠️ **GitHub.com Fallback** ⚠️