New FalconMlExclusion

New-FalconMlExclusion

SYNOPSIS

Create a Machine Learning exclusion

DESCRIPTION

'ConvertTo-FalconMlExclusion' can be used to generate the required Machine Learning exclusion properties using an existing detection.

Requires 'Machine Learning Exclusions: Write'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
Value	String					X	RegEx pattern value
ExcludedFrom	String[]			blocking extraction		X	Actions to exclude
GroupId	Object[]					X	Host group identifier or 'all' to apply to all hosts
Comment	String					X	Audit log comment

SYNTAX

New-FalconMlExclusion [-Value] <String> [-ExcludedFrom] <String[]> [-GroupId] <Object[]> [[-Comment] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

createMLExclusionsV1

USAGE

Create Machine Learning exclusions

New-FalconMlExclusion -Value '/foo' -ExcludedFrom blocking, extraction -GroupId all -Comment 'creating foo'

2022-10-21: PSFalcon v2.2.3