Remove FalconCorrelationRule - CrowdStrike/psfalcon GitHub Wiki
Remove Falcon NGSIEM correlation rules
Requires 'Correlation Rules: Write'.
Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
---|---|---|---|---|---|---|---|
Id | String[] | Correlation rule identifier | X | X |
Remove-FalconCorrelationRule [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]
DELETE /correlation-rules/entities/rules/v1
2024-12-19: PSFalcon v2.2.8