Remove FalconIoaExclusion - CrowdStrike/psfalcon GitHub Wiki

Remove-FalconIoaExclusion

SYNOPSIS

Remove Indicator of Attack exclusions

DESCRIPTION

Requires 'IOA Exclusions: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Comment String Audit log comment
Id String[] Exclusion identifier X X

SYNTAX

Remove-FalconIoaExclusion [[-Comment] <String>] [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

DELETE /policy/entities/ioa-exclusions/v1

falconpy

deleteIOAExclusionsV1

USAGE

Delete IOA exclusions

Remove-FalconIoaExclusion -Id <id>, <id>

2023-04-25: PSFalcon v2.2.5

⚠️ **GitHub.com Fallback** ⚠️