Get FalconIoaGroup

Get-FalconIoaGroup

SYNOPSIS

Search for custom Indicator of Attack rule groups

DESCRIPTION

Requires 'Custom IOA Rules: Read'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
Id	String[]				X	X	Rule group identifier
Filter	String						Falcon Query Language expression to limit results
Query	String						Perform a generic substring search across available fields
Sort	String			created_by.asc created_by.desc created_on.asc created_on.desc description.asc description.desc enabled.asc enabled.desc modified_by.asc modified_by.desc modified_on.asc modified_on.desc name.asc name.desc			Property and direction to sort results
Limit	Int32	1	500				Maximum number of results per request
Offset	Int32						Position to begin retrieving results
Detailed	Switch						Retrieve detailed information
All	Switch						Repeat requests until all available results are retrieved
Total	Switch						Display total result count instead of results

SYNTAX

Get-FalconIoaGroup [[-Filter] <String>] [[-Query] <String>] [[-Sort] <String>] [[-Limit] <Int32>] [-Offset <Int32>] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]

Get-FalconIoaGroup -Id <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

Get-FalconIoaGroup [[-Filter] <String>] [[-Query] <String>] [[-Sort] <String>] [[-Limit] <Int32>] [-Offset <Int32>] -Detailed [-All] [-WhatIf] [-Confirm] [<CommonParameters>]

USAGE

Find custom IOA rule groups

Get-FalconIoaGroup [-Detailed]

Find custom IOA rule groups matching a query

Get-FalconIoaGroup -Filter "name:'updatedRuleGroup'+platform:'mac'" -Detailed

Find custom IOA rule group identifiers matching a query

Get-FalconIoaGroup -Filter "name:'updatedRuleGroup'+platform:'mac'"

2022-10-10: PSFalcon v2.2.3