Invoke FalconIncidentAction

Invoke-FalconIncidentAction

SYNOPSIS

Perform actions on incidents

DESCRIPTION

Requires 'Incidents: Write'.

PARAMETERS

Name	Type	Min	Max	Pattern	Allowed	Pipeline	PipelineByName	Description
Name	String				add_tag delete_tag unassign update_description update_name update_status update_assigned_to_v2	False	False	Action to perform
Value	String					False	False	Value for the chosen action
UpdateDetects	Boolean					False	False	Update status of related 'new' detections
OverwriteDetects	Boolean					False	False	Replace existing status for related detections
Id	String[]			^inc:[a-fA-F0-9]{32}:[a-fA-F0-9]{32}$		True	True	Incident identifier

SYNTAX

Invoke-FalconIncidentAction [-Name] <String> [-Value] <String> [[-UpdateDetects] <Boolean>] [[-OverwriteDetects] <Boolean>] [-Id] <String[]> [-WhatIf] [-Confirm] <CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3