Remove FalconReconRule - CrowdStrike/psfalcon GitHub Wiki
Remove Falcon Intelligence Recon monitoring rules
Requires 'Monitoring rules (Falcon Intelligence Recon): Write'.
Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
---|---|---|---|---|---|---|---|
DeleteNotification | Boolean | Delete notifications generated by rule(s) | |||||
Id | String[] | Monitoring rule identifier | X | X |
Remove-FalconReconRule [[-DeleteNotification] <Boolean>] [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]
DELETE /recon/entities/rules/v1
Remove-FalconReconRule -Id <id>, <id>
2023-11-27: PSFalcon v2.2.6