Skip to content

Invoke FalconRtr

bk-cs edited this page Oct 10, 2022 · 24 revisions

Invoke-FalconRtr

SYNOPSIS

Start a Real-time Response session, execute a command and output the result

DESCRIPTION

Requires 'Real Time Response: Read', 'Real Time Response: Write' or 'Real Time Response (Admin): Write'

PARAMETERS

Name Type Min Max Allowed Pipeline PipelineByName Description
Command String Real-time Response command
Argument String Arguments to include with the command
Timeout Int32 30 600 Length of time to wait for a result, in seconds
QueueOffline Boolean Add non-responsive Hosts to the offline queue
Include String[] agent_version
cid
external_ip
first_seen
hostname
last_seen
local_ip
mac_address
os_build
os_version
platform_name
product_type
product_type_desc
serial_number
system_manufacturer
system_product_name
tags
Include additional properties
GroupId String Host group identifier
HostId String[] X X Host identifier

SYNTAX

Invoke-FalconRtr [-Command] <String> [[-Argument] <String>] [[-Timeout] <Int32>] [[-QueueOffline] <Boolean>] [[-Include] <String[]>] -HostId <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]
Invoke-FalconRtr [-Command] <String> [[-Argument] <String>] [[-Timeout] <Int32>] [[-QueueOffline] <Boolean>] [[-Include] <String[]>] -GroupId <String> [-WhatIf] [-Confirm] [<CommonParameters>]

USAGE

2022-10-10: PSFalcon v2.2.3

Clone this wiki locally