Skip to content

Edit FalconReconNotification

bk-cs edited this page Nov 30, 2023 · 20 revisions

Edit-FalconReconNotification

SYNOPSIS

Modify a Falcon Intelligence Recon notification

DESCRIPTION

Requires 'Monitoring rules (Falcon Intelligence Recon): Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Array Object[] An array of notifications to modify in a single request X
Id String Notification identifier
Status String Notification status new
in-progress
closed-false-positive
closed-true-positive
AssignedToUuid String User identifier
Message String
IdpSendStatus String

SYNTAX

Edit-FalconReconNotification [-Id] <String> [-Status] <String> [-AssignedToUuid] <String> [[-Message] <String>] [[-IdpSendStatus] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]
Edit-FalconReconNotification -Array <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /recon/entities/notifications/v1

falconpy

UpdateNotificationsV1

USAGE

2023-11-27: PSFalcon v2.2.6

Clone this wiki locally