Edit FalconReconRule

Edit-FalconReconRule

SYNOPSIS

Modify a Falcon X Recon monitoring rule

DESCRIPTION

Requires 'Monitoring Rules (Falcon X Recon): Write'.

PARAMETERS

Name	Type	Min	Max	Pattern	Allowed	Pipeline	PipelineByName	Description
Array	Object[]						False	An array of monitoring rules to modify in a single request
Id	String			^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}$		False	False	Monitoring rule identifier
Name	String					False	False	Monitoring rule name
Filter	String					False	False	Monitoring rule filter
Priority	String				high medium low	False	False	Monitoring rule priority
Permission	String				private public	False	False	Permission level [public: 'All Intel users', private: 'Recon Admins']

SYNTAX

Edit-FalconReconRule [-Id] <String> [-Name] <String> [-Filter] <String> [-Priority] <String> [-Permission] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

Edit-FalconReconRule -Array <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

USAGE

Generated 20220922 using PSFalcon v2.2.3