Remove FalconCorrelationRule - CrowdStrike/psfalcon GitHub Wiki

Remove-FalconCorrelationRule

SYNOPSIS

Remove Falcon NGSIEM correlation rules

DESCRIPTION

Requires 'Correlation Rules: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id String[] Correlation rule identifier X X

SYNTAX

Remove-FalconCorrelationRule [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

DELETE /correlation-rules/entities/rules/v1

falconpy

entities_rules_delete_v1

USAGE

2024-12-19: PSFalcon v2.2.8

⚠️ **GitHub.com Fallback** ⚠️