Remove FalconIoaGroup - CrowdStrike/psfalcon GitHub Wiki
Remove custom Indicator of Attack rule groups
Requires 'Custom IOA rules: Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Comment | String | Audit log comment | |||||
| Id | String[] | Rule group identifier | X | X |
Remove-FalconIoaGroup [[-Comment] <String>] [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]DELETE /ioarules/entities/rule-groups/v1
Remove-FalconIoaGroup -Id <id>, <id>2023-04-25: PSFalcon v2.2.5
