Edit FalconResponsePolicy

Edit-FalconResponsePolicy

SYNOPSIS

Modify Real-time Response policies

DESCRIPTION

Requires 'Response policies: Write'.

PARAMETERS

Name	Type	Description	Min	Max	Allowed	Pipeline	PipelineByName
InputObject	Object[]	One or more policies to modify in a single request				X
Id	String	Policy identifier
Name	String	Policy name
Description	String	Policy description
Setting	Object[]	Policy settings

SYNTAX

Edit-FalconResponsePolicy [-Id] <String> [[-Name] <String>] [[-Description] <String>] [[-Setting] <Object[]>] [-WhatIf] [-Confirm] [<CommonParameters>]

Edit-FalconResponsePolicy -InputObject <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /policy/entities/response/v1

falconpy

updateRTResponsePolicies

USAGE

Enable policy settings

$Setting = @(
    @{
        id = 'RealTimeFunctionality'
        value = @{ enabled = $true }
    },
    @{
        id = 'CustomScripts'
        value = @{ enabled = $true }
    },
    @{
        id = 'GetCommand'
        value = @{ enabled = $true }
    },
    @{
        id = 'ExecCommand'
        value = @{ enabled = $true }
    }
)
Edit-FalconResponsePolicy -Id <id> -Setting $Setting

2024-09-03: PSFalcon v2.2.7