Remove FalconIoaRule - CrowdStrike/psfalcon GitHub Wiki
Remove custom Indicator of Attack rules from rule groups
Requires 'Custom IOA rules: Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Comment | String | Audit log comment | |||||
| RuleGroupId | String | Rule group identifier | X | ||||
| Id | String[] | Rule identifier | X |
Remove-FalconIoaRule [[-Comment] <String>] [-RuleGroupId] <String> [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]DELETE /ioarules/entities/rules/v1
Remove-FalconIoaRule -RulegroupId <id> -Id <id>, <id>2023-04-25: PSFalcon v2.2.5
