Skip to content

Invoke FalconHostAction

bk-cs edited this page Sep 22, 2022 · 19 revisions

Invoke-FalconHostAction

SYNOPSIS

Perform actions on hosts

DESCRIPTION

Requires 'Hosts: Write', plus related permission(s) for 'Include' selection(s).

PARAMETERS

Name Type Min Max Pattern Allowed Pipeline PipelineByName Description
Name String contain
lift_containment
hide_host
unhide_host
detection_suppress
detection_unsuppress
False False Action to perform
Include String[] agent_version
cid
external_ip
first_seen
host_hidden_status
hostname
last_seen
local_ip
mac_address
os_build
os_version
platform_name
product_type
product_type_desc
reduced_functionality_mode
serial_number
system_manufacturer
system_product_name
tags
False False Include additional properties
Id String[] ^[a-fA-F0-9]{32}$ Host identifier

SYNTAX

Invoke-FalconHostAction [-Name] <String> [[-Include] <String[]>] [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally