Remove FalconGetFile - CrowdStrike/psfalcon GitHub Wiki
Remove Real-time Response 'get' files
Delete files previously retrieved during a Real-time Response session. The required 'Id' and 'SessionId' values are contained in the results of 'Start-FalconSession' and 'Invoke-FalconAdminCommand' or 'Invoke-FalconBatchGet' commands.
Requires 'Real time response: Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| SessionId | String | Session identifier | X | ||||
| Id | String | Real-time Response 'get' file identifier | X |
Remove-FalconGetFile [-SessionId] <String> [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]DELETE /real-time-response/entities/file/v2
2023-04-25: PSFalcon v2.2.5
