Send FalconSampleArchive - CrowdStrike/psfalcon GitHub Wiki
Upload an archive containing sample files.
Once upload has been completed, use the returned 'sha256' value with 'Expand-FalconSampleArchive' to extract files for submission to Falcon Intelligence Sandbox or QuickScan.
Requires 'Sample uploads: Write'.
Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
---|---|---|---|---|---|---|---|
IsConfidential | Boolean | Prohibit sample(s) from being displayed in MalQuery [default: True] | |||||
Comment | String | Audit log comment | |||||
Password | String | Password to extract files from archive | |||||
Name | String | File name | |||||
Path | String | Path to local file | X |
Send-FalconSampleArchive [[-IsConfidential] <Boolean>] [[-Comment] <String>] [[-Password] <String>] [[-Name] <String>] [-Path] <String> [-WhatIf] [-Confirm] [<CommonParameters>]
POST /archives/entities/archives/v2
2023-04-25: PSFalcon v2.2.5