Receive FalconCaoQueryArchive
Download an archive containing Falcon Counter Adversary Operations queries
Requires 'CAO Hunting: Read'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Path | String | Destination path | |||||
| Language | String | Query language |
__all__cqlsnortsuricatayara
|
||||
| Filter | String | Falcon Query Language expression to limit results | |||||
| Type | String | Archive type [default: zip] |
gzipzip
|
||||
| Force | Switch | Overwrite an existing file when present |
Receive-FalconCaoQueryArchive [-Path] <String> [-Language] <String> [[-Filter] <String>] [[-Type] <String>] [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]GET /hunting/entities/archive-exports/v1
2025-10-24: PSFalcon v2.3.0
