Skip to content

Edit FalconReconNotification

bk-cs edited this page Sep 3, 2024 · 20 revisions

Edit-FalconReconNotification

SYNOPSIS

Modify a Falcon Intelligence Recon notification

DESCRIPTION

Requires 'Monitoring rules (Falcon Intelligence Recon): Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
InputObject Object[] One or more notifications to modify in a single request X
Id String pSendStatus
Status String Notification status new
in-progress
closed-false-positive
closed-true-positive
AssignedToUuid String User identifier
Message String
IdpSendStatus String

SYNTAX

Edit-FalconReconNotification [-Id] <String> [-Status] <String> [-AssignedToUuid] <String> [[-Message] <String>] [[-IdpSendStatus] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]
Edit-FalconReconNotification -InputObject <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /recon/entities/notifications/v1

falconpy

UpdateNotificationsV1

USAGE

2024-09-03: PSFalcon v2.2.7

Clone this wiki locally