Skip to content

Invoke FalconDeploy

bk-cs edited this page Sep 22, 2022 · 20 revisions

Invoke-FalconDeploy

SYNOPSIS

Deploy and run an executable using Real-time Response

DESCRIPTION

Requires 'Hosts: Read', 'Real Time Response (Admin): Write'.

PARAMETERS

Name Type Min Max Pattern Allowed Pipeline PipelineByName Description
File String False False Name of a 'CloudFile' or path to a local executable to upload
Archive String False False Name of a 'CloudFile' or path to a local archive (zip, tar, tar.gz, tgz) to upload
Run String False False Name of the file to run once extracted from the target archive
Argument String False False Arguments to include when running the target executable
Timeout Int32 1 600 False False Length of time to wait for a result, in seconds
QueueOffline Boolean False False Add non-responsive Hosts to the offline queue
Include String[] agent_version
cid
external_ip
first_seen
hostname
last_seen
local_ip
mac_address
os_build
os_version
platform_name
product_type
product_type_desc
serial_number
system_manufacturer
system_product_name
tags
False False Include additional properties
GroupId String ^[a-fA-F0-9]{32}$ False True Host group identifier
HostId String[] ^[a-fA-F0-9]{32}$ True True Host identifier

SYNTAX

Invoke-FalconDeploy [-File] <String> [[-Argument] <String>] [[-Timeout] <Int32>] [[-QueueOffline] <Boolean>] [[-Include] <String[]>] -HostId <String[]> [-WhatIf] -Confirm] [<CommonParameters>]
Invoke-FalconDeploy [-File] <String> [[-Argument] <String>] [[-Timeout] <Int32>] [[-QueueOffline] <Boolean>] [[-Include] <String[]>] -GroupId <String> [-WhatIf] -Confirm] [<CommonParameters>]
Invoke-FalconDeploy -Archive <String> [-Run] <String> [[-Argument] <String>] [[-Timeout] <Int32>] [[-QueueOffline] <Boolean>] [[-Include] <String[]>] -GroupId 
<String> [-WhatIf] [-Confirm] [<CommonParameters>]
Invoke-FalconDeploy -Archive <String> [-Run] <String> [[-Argument] <String>] [[-Timeout] <Int32>] [[-QueueOffline] <Boolean>] [[-Include] <String[]>] -HostId 
<String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally