Remove FalconReconRule - CrowdStrike/psfalcon GitHub Wiki

Remove-FalconReconRule

SYNOPSIS

Remove Falcon Intelligence Recon monitoring rules

DESCRIPTION

Requires 'Monitoring rules (Falcon Intelligence Recon): Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
DeleteNotification Boolean Delete notifications generated by rule(s)
Id String[] Monitoring rule identifier X X

SYNTAX

Remove-FalconReconRule [[-DeleteNotification] <Boolean>] [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

DELETE /recon/entities/rules/v1

falconpy

DeleteRulesV1

USAGE

Deleting a monitoring rule

Remove-FalconReconRule -Id <id>, <id>

2023-11-27: PSFalcon v2.2.6

⚠️ **GitHub.com Fallback** ⚠️