Get FalconBehavior

Get-FalconBehavior

SYNOPSIS

Search for behaviors

DESCRIPTION

Requires 'Incidents: Read'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
Id	String[]				X	X	Behavior identifier
Filter	String						Falcon Query Language expression to limit results
Sort	String			timestamp.asc timestamp.desc			Property and direction to sort results
Limit	Int32	1	500				Maximum number of results per request
Offset	Int32						Position to begin retrieving results
Detailed	Switch						Retrieve detailed information
All	Switch						Repeat requests until all available results are retrieved
Total	Switch						Display total result count instead of results

SYNTAX

Get-FalconBehavior [[-Filter] <String>] [[-Sort] <String>] [[-Limit] <Int32>] [-Offset <Int32>] [-Detailed] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]

Get-FalconBehavior -Id <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

QueryBehaviors
GetBehaviors

USAGE

Find behaviors

Get-FalconBehavior [-Detailed] [-All]

2022-10-24: PSFalcon v2.2.3