Send FalconNgsLookupFile - CrowdStrike/psfalcon GitHub Wiki

Send-FalconNgsLookupFile

SYNOPSIS

Create a Falcon NGSIEM lookup file from a CSV

DESCRIPTION

Requires 'NGSIEM Lookup Files: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Filename String Lookup file name
Domain String Repository or view all
falcon
parsers-repository
third-party 		X
Path String Path to CSV X

SYNTAX

Send-FalconNgsLookupFile [-Filename] <String> [-Domain] <String> [-Path] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

POST /ngsiem-content/entities/lookupfiles/v1

falconpy

CreateLookupFile

USAGE

2025-09-02: PSFalcon v2.2.9

⚠️ **GitHub.com Fallback** ⚠️