Receive FalconAttck - CrowdStrike/psfalcon GitHub Wiki

Receive-FalconAttck

SYNOPSIS

Download Mitre ATT&CK information for an actor

DESCRIPTION

Requires 'Actors (Falcon Intelligence): Read'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Format String Export format [default: json] csv
json
Path String Destination path [default: .<slug>.]
Slug String Actor identifier X X
Force Switch Overwrite an existing file when present

SYNTAX

Receive-FalconAttck [[-Format] <String>] [[-Path] <String>] [-Slug] <String> [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /intel/entities/mitre-reports/v1

falconpy

GetMitreReport

USAGE

2025-09-19: PSFalcon v2.2.9

⚠️ **GitHub.com Fallback** ⚠️